General

  • Target

    JaffaCakes118_05789453f84f038aee8716aefa8b34a75f7e642184b4d2ad7b8f245ee728252b

  • Size

    188KB

  • Sample

    241230-yg19cawjel

  • MD5

    aa2d5cce9c9ee8c10322b47bc865f187

  • SHA1

    cf78a5d2dc2f89e4108376866780aa346a8e82cf

  • SHA256

    05789453f84f038aee8716aefa8b34a75f7e642184b4d2ad7b8f245ee728252b

  • SHA512

    862d453fd80be7376163a8c29cc05a84b99f7cb5332eec7596aa15d57b41ae9ae910eff383d8f000ff2957bb33344d408577c45ab617b6450d77f7a2251fa6ee

  • SSDEEP

    3072:LteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzN9qM:Dq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_05789453f84f038aee8716aefa8b34a75f7e642184b4d2ad7b8f245ee728252b

    • Size

      188KB

    • MD5

      aa2d5cce9c9ee8c10322b47bc865f187

    • SHA1

      cf78a5d2dc2f89e4108376866780aa346a8e82cf

    • SHA256

      05789453f84f038aee8716aefa8b34a75f7e642184b4d2ad7b8f245ee728252b

    • SHA512

      862d453fd80be7376163a8c29cc05a84b99f7cb5332eec7596aa15d57b41ae9ae910eff383d8f000ff2957bb33344d408577c45ab617b6450d77f7a2251fa6ee

    • SSDEEP

      3072:LteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzN9qM:Dq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks