General

  • Target

    JaffaCakes118_b9a57261498550fc0f28733d1cecd7a310b48050fae1bfa1afd2215a470792b3

  • Size

    188KB

  • Sample

    241230-z9hhdaslbw

  • MD5

    94322734bb6d113e722cf9343e5faf84

  • SHA1

    4278d87e564e5b77252a1f25609d38a00d5c9854

  • SHA256

    b9a57261498550fc0f28733d1cecd7a310b48050fae1bfa1afd2215a470792b3

  • SHA512

    367b9659e7a942526db0a51fb277123dd65dcc6de0e822b5bec8fb184752145f96cf577ad85284ea3772cd1b5c79d4fe4ecdc8e93392c68847415690f07bccd7

  • SSDEEP

    3072:8teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzY9qM:Aq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b9a57261498550fc0f28733d1cecd7a310b48050fae1bfa1afd2215a470792b3

    • Size

      188KB

    • MD5

      94322734bb6d113e722cf9343e5faf84

    • SHA1

      4278d87e564e5b77252a1f25609d38a00d5c9854

    • SHA256

      b9a57261498550fc0f28733d1cecd7a310b48050fae1bfa1afd2215a470792b3

    • SHA512

      367b9659e7a942526db0a51fb277123dd65dcc6de0e822b5bec8fb184752145f96cf577ad85284ea3772cd1b5c79d4fe4ecdc8e93392c68847415690f07bccd7

    • SSDEEP

      3072:8teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzY9qM:Aq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks