General

  • Target

    JaffaCakes118_898b94f85b60bd62acc96460436e9751d2c9cdfc95fc9b00aad2dd5ebcf4ba40

  • Size

    188KB

  • Sample

    241230-zxgqba1pbv

  • MD5

    27e7fb3f19e19cfccebdd1c5d30da209

  • SHA1

    840493a046ab979ad83d3182dbd7cd8feba6ab96

  • SHA256

    898b94f85b60bd62acc96460436e9751d2c9cdfc95fc9b00aad2dd5ebcf4ba40

  • SHA512

    f09d395755aec00805e615eb011af48da675d86b822136fa31decb00ac593cda3ba44ff8cee6af765c60fe5c9b1c04527302c252ac33a6e83515797a94a6a46d

  • SSDEEP

    3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:nq7fYIHBZkTB6DWruUCOwjt

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_898b94f85b60bd62acc96460436e9751d2c9cdfc95fc9b00aad2dd5ebcf4ba40

    • Size

      188KB

    • MD5

      27e7fb3f19e19cfccebdd1c5d30da209

    • SHA1

      840493a046ab979ad83d3182dbd7cd8feba6ab96

    • SHA256

      898b94f85b60bd62acc96460436e9751d2c9cdfc95fc9b00aad2dd5ebcf4ba40

    • SHA512

      f09d395755aec00805e615eb011af48da675d86b822136fa31decb00ac593cda3ba44ff8cee6af765c60fe5c9b1c04527302c252ac33a6e83515797a94a6a46d

    • SSDEEP

      3072:/teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:nq7fYIHBZkTB6DWruUCOwjt

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks