General

  • Target

    05f964749a55e118dd6fee180d8d0398_JaffaCakes118

  • Size

    320KB

  • Sample

    240728-cykf9swere

  • MD5

    05f964749a55e118dd6fee180d8d0398

  • SHA1

    52368dd1358a3c865c2a64c2b51eef786d0ad15c

  • SHA256

    ca59edc0f721f34fa3178168dcc138947f1370d1672a9653e42eec0327f2ec6a

  • SHA512

    4679b1c994d06b2c71a54b84a0387633bc0da2c6356760772e4ec3dde6d593e6363ec3b937af1cf4362dcadbbc67ea4076decdbbd956235781bb31cb4aebc5d4

  • SSDEEP

    6144:+hT2Mw9oF8K9lYznaQzSyBrh4v3Amu60tm8Qsw/x3XhhMasm/JMi2Fe4:3MyLK9lqIwh4Qmults/VhhMaX2Fd

Malware Config

Extracted

Family

dridex

Botnet

10555

C2

51.75.24.85:443

46.22.116.163:3074

173.249.46.113:3889

192.241.174.45:4443

rc4.plain
rc4.plain

Targets

    • Target

      05f964749a55e118dd6fee180d8d0398_JaffaCakes118

    • Size

      320KB

    • MD5

      05f964749a55e118dd6fee180d8d0398

    • SHA1

      52368dd1358a3c865c2a64c2b51eef786d0ad15c

    • SHA256

      ca59edc0f721f34fa3178168dcc138947f1370d1672a9653e42eec0327f2ec6a

    • SHA512

      4679b1c994d06b2c71a54b84a0387633bc0da2c6356760772e4ec3dde6d593e6363ec3b937af1cf4362dcadbbc67ea4076decdbbd956235781bb31cb4aebc5d4

    • SSDEEP

      6144:+hT2Mw9oF8K9lYznaQzSyBrh4v3Amu60tm8Qsw/x3XhhMasm/JMi2Fe4:3MyLK9lqIwh4Qmults/VhhMaX2Fd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

MITRE ATT&CK Enterprise v15

Tasks