General

  • Target

    JaffaCakes118_a4d464b2c842ed2a4c6136ec5cceb9c99db19b21b7416e4bb688427a260034e8

  • Size

    188KB

  • Sample

    241230-xxakwsvjck

  • MD5

    984a1fff68c8fb28e50ff64095deb412

  • SHA1

    aeb1ce43850ff4161cf27fcf0234d3f42231c8a3

  • SHA256

    a4d464b2c842ed2a4c6136ec5cceb9c99db19b21b7416e4bb688427a260034e8

  • SHA512

    fcd38ca3366cc44df3e99d01cc10ac3e669563a9a5c846eec8241a717e9baf54ec55cbc5b6f6db84b9d1a88fbf04af6ffc43f37ef41a049c3b4799175a0b2525

  • SSDEEP

    3072:GteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzT9qM:uq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a4d464b2c842ed2a4c6136ec5cceb9c99db19b21b7416e4bb688427a260034e8

    • Size

      188KB

    • MD5

      984a1fff68c8fb28e50ff64095deb412

    • SHA1

      aeb1ce43850ff4161cf27fcf0234d3f42231c8a3

    • SHA256

      a4d464b2c842ed2a4c6136ec5cceb9c99db19b21b7416e4bb688427a260034e8

    • SHA512

      fcd38ca3366cc44df3e99d01cc10ac3e669563a9a5c846eec8241a717e9baf54ec55cbc5b6f6db84b9d1a88fbf04af6ffc43f37ef41a049c3b4799175a0b2525

    • SSDEEP

      3072:GteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzT9qM:uq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks