General

  • Target

    JaffaCakes118_e8555f3b6c6d46b095e5ab6fb9e0d998c8921e0e5ab09fbdfb2d8bc752961119

  • Size

    188KB

  • Sample

    241230-z2kyja1rbw

  • MD5

    5ec3cfb3ec8af15239464a89b91cb359

  • SHA1

    61dcc95fcc6d1f14b94783b8a47c0cbd03aff76b

  • SHA256

    e8555f3b6c6d46b095e5ab6fb9e0d998c8921e0e5ab09fbdfb2d8bc752961119

  • SHA512

    62bfd328500a6f9dfa7e89845f8a5b5090ed51ba0a5c837dda11918a6b7a0ce24d48c54fee75552832e6298cd2d5e62c32130b16fd04ef35e960f193d18fc1ce

  • SSDEEP

    3072:XteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz19qM:Pq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e8555f3b6c6d46b095e5ab6fb9e0d998c8921e0e5ab09fbdfb2d8bc752961119

    • Size

      188KB

    • MD5

      5ec3cfb3ec8af15239464a89b91cb359

    • SHA1

      61dcc95fcc6d1f14b94783b8a47c0cbd03aff76b

    • SHA256

      e8555f3b6c6d46b095e5ab6fb9e0d998c8921e0e5ab09fbdfb2d8bc752961119

    • SHA512

      62bfd328500a6f9dfa7e89845f8a5b5090ed51ba0a5c837dda11918a6b7a0ce24d48c54fee75552832e6298cd2d5e62c32130b16fd04ef35e960f193d18fc1ce

    • SSDEEP

      3072:XteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz19qM:Pq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks