General

  • Target

    JaffaCakes118_377f15a95ed7ca99e4be0bf5041ce10d506dc7db87fae425d077343ef291b1b0

  • Size

    188KB

  • Sample

    241230-ycfrvaxrcs

  • MD5

    869771879408f07b2ac4e500df3e7211

  • SHA1

    15b214ae967688e6e1d9c2d135d1291e2a6ba085

  • SHA256

    377f15a95ed7ca99e4be0bf5041ce10d506dc7db87fae425d077343ef291b1b0

  • SHA512

    13efb1d02f6a346348dfce0d515ac3cb81557be5b07565b63876df7950e11b4c49384f527c8649003889726ac0838550e32dd65bd955d6f50065fc904a8f2dd5

  • SSDEEP

    3072:jteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:Lq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_377f15a95ed7ca99e4be0bf5041ce10d506dc7db87fae425d077343ef291b1b0

    • Size

      188KB

    • MD5

      869771879408f07b2ac4e500df3e7211

    • SHA1

      15b214ae967688e6e1d9c2d135d1291e2a6ba085

    • SHA256

      377f15a95ed7ca99e4be0bf5041ce10d506dc7db87fae425d077343ef291b1b0

    • SHA512

      13efb1d02f6a346348dfce0d515ac3cb81557be5b07565b63876df7950e11b4c49384f527c8649003889726ac0838550e32dd65bd955d6f50065fc904a8f2dd5

    • SSDEEP

      3072:jteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:Lq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks