General

  • Target

    JaffaCakes118_068f6069c9ee8950398ec27e18590b0525995bbf2f13ece2b6e0ee5b2936b671

  • Size

    188KB

  • Sample

    241230-yln5kswlak

  • MD5

    4ecf898f83dbf31bbcf465a06409969f

  • SHA1

    7db4d89aedb7260f57d48ed52548f5499d3690cf

  • SHA256

    068f6069c9ee8950398ec27e18590b0525995bbf2f13ece2b6e0ee5b2936b671

  • SHA512

    be33bd0b37af38886c2f802001cda9c6d42e4d791897e11a3e8de86b75f9de285f627c99deba667901b5c777951ee13aed5dabe983a9bbef64fe734050f8be54

  • SSDEEP

    3072:tteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzN9qM:Zq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_068f6069c9ee8950398ec27e18590b0525995bbf2f13ece2b6e0ee5b2936b671

    • Size

      188KB

    • MD5

      4ecf898f83dbf31bbcf465a06409969f

    • SHA1

      7db4d89aedb7260f57d48ed52548f5499d3690cf

    • SHA256

      068f6069c9ee8950398ec27e18590b0525995bbf2f13ece2b6e0ee5b2936b671

    • SHA512

      be33bd0b37af38886c2f802001cda9c6d42e4d791897e11a3e8de86b75f9de285f627c99deba667901b5c777951ee13aed5dabe983a9bbef64fe734050f8be54

    • SSDEEP

      3072:tteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzN9qM:Zq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks