General

  • Target

    JaffaCakes118_8908808085d56b397ea7153657815873b7ddf49bc5a79774615c741d4cf4a1db

  • Size

    188KB

  • Sample

    241230-ynph5ayna1

  • MD5

    00a8a0f73871bc0671f8b28ea588bd51

  • SHA1

    a58cbab7a90df0190888e66f931acccf3b184c78

  • SHA256

    8908808085d56b397ea7153657815873b7ddf49bc5a79774615c741d4cf4a1db

  • SHA512

    b32ad589f504412bba2e329c4f53b7441c29f796a664d5db69296abfc223152aeab5f924f9991ecd7ef87e84f752a247a1077fb3213d134d1f70e3200537e7cc

  • SSDEEP

    3072:OteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzQ9qM:mq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8908808085d56b397ea7153657815873b7ddf49bc5a79774615c741d4cf4a1db

    • Size

      188KB

    • MD5

      00a8a0f73871bc0671f8b28ea588bd51

    • SHA1

      a58cbab7a90df0190888e66f931acccf3b184c78

    • SHA256

      8908808085d56b397ea7153657815873b7ddf49bc5a79774615c741d4cf4a1db

    • SHA512

      b32ad589f504412bba2e329c4f53b7441c29f796a664d5db69296abfc223152aeab5f924f9991ecd7ef87e84f752a247a1077fb3213d134d1f70e3200537e7cc

    • SSDEEP

      3072:OteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzQ9qM:mq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks