General

  • Target

    JaffaCakes118_c7fae1b685fd7823e4dd52489428559314bf48b4197fb5dc1e42799b211f89a6

  • Size

    188KB

  • Sample

    241230-z8h3hsskf1

  • MD5

    ccd8f6b939030691e81689dfd9aa9e2a

  • SHA1

    ce14322d0da3590be389199faa2cce075ec7b710

  • SHA256

    c7fae1b685fd7823e4dd52489428559314bf48b4197fb5dc1e42799b211f89a6

  • SHA512

    fd4ea4da27cdb0da8a33841eae4dcad2a2a4391b03c10db5ccba9d4a91b29d5ee2bdcdae137c014bc66b566ff40ec28b675365e150f86a1ede64cb657d66fde7

  • SSDEEP

    3072:UteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzW9qM:oq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c7fae1b685fd7823e4dd52489428559314bf48b4197fb5dc1e42799b211f89a6

    • Size

      188KB

    • MD5

      ccd8f6b939030691e81689dfd9aa9e2a

    • SHA1

      ce14322d0da3590be389199faa2cce075ec7b710

    • SHA256

      c7fae1b685fd7823e4dd52489428559314bf48b4197fb5dc1e42799b211f89a6

    • SHA512

      fd4ea4da27cdb0da8a33841eae4dcad2a2a4391b03c10db5ccba9d4a91b29d5ee2bdcdae137c014bc66b566ff40ec28b675365e150f86a1ede64cb657d66fde7

    • SSDEEP

      3072:UteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzW9qM:oq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks