General

  • Target

    JaffaCakes118_6428a7bf7b6bca0111631be8eb12f246a487684512f966785e83ee52bf2176dc

  • Size

    188KB

  • Sample

    241230-y7pm8sznbt

  • MD5

    e1977fbef1e6e0c772328972d1d2c041

  • SHA1

    3d0c0d1e394bb3873e5946eb2aa08548901a314c

  • SHA256

    6428a7bf7b6bca0111631be8eb12f246a487684512f966785e83ee52bf2176dc

  • SHA512

    5fd399b6edd78b8ba3ca1f3be3ee1f7dc3fbf221baf4cc99664c21af9d2172f43aa73351bc5c855ea602c081a8a21fda9ac2c9f2429e9b957aba882f0358d5e6

  • SSDEEP

    3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzh9qM:nq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6428a7bf7b6bca0111631be8eb12f246a487684512f966785e83ee52bf2176dc

    • Size

      188KB

    • MD5

      e1977fbef1e6e0c772328972d1d2c041

    • SHA1

      3d0c0d1e394bb3873e5946eb2aa08548901a314c

    • SHA256

      6428a7bf7b6bca0111631be8eb12f246a487684512f966785e83ee52bf2176dc

    • SHA512

      5fd399b6edd78b8ba3ca1f3be3ee1f7dc3fbf221baf4cc99664c21af9d2172f43aa73351bc5c855ea602c081a8a21fda9ac2c9f2429e9b957aba882f0358d5e6

    • SSDEEP

      3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzh9qM:nq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks