General

  • Target

    JaffaCakes118_a5c4313380b9ed9e53646bff68966b1880a2345c6d41e364df6f318b44630959

  • Size

    188KB

  • Sample

    241230-z1g59ayngl

  • MD5

    3805423904d7405b45aeaed8cd082a04

  • SHA1

    05b7cb3882dbdc5d59ed1db08e7929e1d7827c68

  • SHA256

    a5c4313380b9ed9e53646bff68966b1880a2345c6d41e364df6f318b44630959

  • SHA512

    75f3914363eda80509de03433800c76fe794c8f443a789e67676c23e4a9c7a63b5ac085e7e5dcf5e949a36ff69413987395b1c843baf03e068b12d707335055e

  • SSDEEP

    3072:SteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz09qM:aq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a5c4313380b9ed9e53646bff68966b1880a2345c6d41e364df6f318b44630959

    • Size

      188KB

    • MD5

      3805423904d7405b45aeaed8cd082a04

    • SHA1

      05b7cb3882dbdc5d59ed1db08e7929e1d7827c68

    • SHA256

      a5c4313380b9ed9e53646bff68966b1880a2345c6d41e364df6f318b44630959

    • SHA512

      75f3914363eda80509de03433800c76fe794c8f443a789e67676c23e4a9c7a63b5ac085e7e5dcf5e949a36ff69413987395b1c843baf03e068b12d707335055e

    • SSDEEP

      3072:SteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz09qM:aq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks