General

  • Target

    JaffaCakes118_736c0726f66b061721242356f10ea0e1a578efef7a317377212996d47c649257

  • Size

    188KB

  • Sample

    241230-ymt28awldq

  • MD5

    f74c42a7288bdf47466524a8c1704627

  • SHA1

    1c5c1260dfebc0c171eff9e384b886f0981eefad

  • SHA256

    736c0726f66b061721242356f10ea0e1a578efef7a317377212996d47c649257

  • SHA512

    dbdab96969f5e18dce8db273064daf200f310525d4b017c935685fa540e29d7b20aa8319f6532c4f73e202238d241591ea6f3a716b37540f3f2999e7cdaddfca

  • SSDEEP

    3072:gA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:gzIqATVfQeV2FZalKq6jtGJWuTmd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_736c0726f66b061721242356f10ea0e1a578efef7a317377212996d47c649257

    • Size

      188KB

    • MD5

      f74c42a7288bdf47466524a8c1704627

    • SHA1

      1c5c1260dfebc0c171eff9e384b886f0981eefad

    • SHA256

      736c0726f66b061721242356f10ea0e1a578efef7a317377212996d47c649257

    • SHA512

      dbdab96969f5e18dce8db273064daf200f310525d4b017c935685fa540e29d7b20aa8319f6532c4f73e202238d241591ea6f3a716b37540f3f2999e7cdaddfca

    • SSDEEP

      3072:gA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:gzIqATVfQeV2FZalKq6jtGJWuTmd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks