General

  • Target

    JaffaCakes118_184cdb2350b44f17b85f36cca02beab5dd0d2fa29968ef9011fc406776d82728

  • Size

    188KB

  • Sample

    241230-xc4cgatkdr

  • MD5

    c6beaf662106f646459e6e453ec42098

  • SHA1

    d2e5ee33ebeac40955064454cd1b4395f15ea1bb

  • SHA256

    184cdb2350b44f17b85f36cca02beab5dd0d2fa29968ef9011fc406776d82728

  • SHA512

    d560180076b1fa9cb3bb901bbad61c504a827d40bacce54f83cedb733d97fd69b862ff9accf6ea92e0c86685c9050a8380d1f7f511ae945f76d77c005334f815

  • SSDEEP

    3072:MteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzF9qM:wq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_184cdb2350b44f17b85f36cca02beab5dd0d2fa29968ef9011fc406776d82728

    • Size

      188KB

    • MD5

      c6beaf662106f646459e6e453ec42098

    • SHA1

      d2e5ee33ebeac40955064454cd1b4395f15ea1bb

    • SHA256

      184cdb2350b44f17b85f36cca02beab5dd0d2fa29968ef9011fc406776d82728

    • SHA512

      d560180076b1fa9cb3bb901bbad61c504a827d40bacce54f83cedb733d97fd69b862ff9accf6ea92e0c86685c9050a8380d1f7f511ae945f76d77c005334f815

    • SSDEEP

      3072:MteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzF9qM:wq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks