General

  • Target

    JaffaCakes118_f4fc66796ef5fc3c3301d648ca2bebec35c74fee66d9670f5b3645447eaf3953

  • Size

    188KB

  • Sample

    241230-ychansvqdj

  • MD5

    105e9f529ad089388cf1f9339867006a

  • SHA1

    b37a3daa000b72d70e8796eea586e1959a2142db

  • SHA256

    f4fc66796ef5fc3c3301d648ca2bebec35c74fee66d9670f5b3645447eaf3953

  • SHA512

    a67a2f4280d326b851cd77a004bc7b5a3235dd44025811d39d00e360db9443b91595cd1ee520e9dc6570c17f69d24b2fea6a2aa666802585b835b765f2848925

  • SSDEEP

    3072:xteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:dq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f4fc66796ef5fc3c3301d648ca2bebec35c74fee66d9670f5b3645447eaf3953

    • Size

      188KB

    • MD5

      105e9f529ad089388cf1f9339867006a

    • SHA1

      b37a3daa000b72d70e8796eea586e1959a2142db

    • SHA256

      f4fc66796ef5fc3c3301d648ca2bebec35c74fee66d9670f5b3645447eaf3953

    • SHA512

      a67a2f4280d326b851cd77a004bc7b5a3235dd44025811d39d00e360db9443b91595cd1ee520e9dc6570c17f69d24b2fea6a2aa666802585b835b765f2848925

    • SSDEEP

      3072:xteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzo9qM:dq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks