General

  • Target

    JaffaCakes118_a78988c67ed74b1fefc750cdf41d1b84e7eae2376c8a03edeacd7408b10bc31c

  • Size

    188KB

  • Sample

    241230-yzfqcswrbq

  • MD5

    04483cd8311f440a2f1f68b785ac518c

  • SHA1

    695706975d3fa677d4e88d08a10be167068bc2fa

  • SHA256

    a78988c67ed74b1fefc750cdf41d1b84e7eae2376c8a03edeacd7408b10bc31c

  • SHA512

    8d3eeea11214c5afe2d1b825968b487c2f47a43d4c131ca5aa8e36bf55b9b0f3d68bb9d5c3977f008bce6edf4903c05e64380287debdad630436c0096a908cf4

  • SSDEEP

    3072:dteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:pq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a78988c67ed74b1fefc750cdf41d1b84e7eae2376c8a03edeacd7408b10bc31c

    • Size

      188KB

    • MD5

      04483cd8311f440a2f1f68b785ac518c

    • SHA1

      695706975d3fa677d4e88d08a10be167068bc2fa

    • SHA256

      a78988c67ed74b1fefc750cdf41d1b84e7eae2376c8a03edeacd7408b10bc31c

    • SHA512

      8d3eeea11214c5afe2d1b825968b487c2f47a43d4c131ca5aa8e36bf55b9b0f3d68bb9d5c3977f008bce6edf4903c05e64380287debdad630436c0096a908cf4

    • SSDEEP

      3072:dteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz/9qM:pq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks