General

  • Target

    JaffaCakes118_c92440fc0e93d1698b3fe408dafc3987be7f40b2790ad86525fae7a2e5155e94

  • Size

    188KB

  • Sample

    241230-y38kjszlhv

  • MD5

    22bbfca4b2985c5744d2fd4a6b638367

  • SHA1

    5fea6ecbe5543750e08cf58b790a29a440e64104

  • SHA256

    c92440fc0e93d1698b3fe408dafc3987be7f40b2790ad86525fae7a2e5155e94

  • SHA512

    48be26c31922422eecc3116ec883466e238484093ec7b2858a4d3a3548f9a1445ec33170b4e0f83bab6608031718432afc078f8bc0adb79559c3edaff99f1bbd

  • SSDEEP

    3072:CteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzx9qM:qq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c92440fc0e93d1698b3fe408dafc3987be7f40b2790ad86525fae7a2e5155e94

    • Size

      188KB

    • MD5

      22bbfca4b2985c5744d2fd4a6b638367

    • SHA1

      5fea6ecbe5543750e08cf58b790a29a440e64104

    • SHA256

      c92440fc0e93d1698b3fe408dafc3987be7f40b2790ad86525fae7a2e5155e94

    • SHA512

      48be26c31922422eecc3116ec883466e238484093ec7b2858a4d3a3548f9a1445ec33170b4e0f83bab6608031718432afc078f8bc0adb79559c3edaff99f1bbd

    • SSDEEP

      3072:CteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzx9qM:qq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks