General

  • Target

    a34b1a88f1eb7a27ddd71408d9ca6373_JaffaCakes118

  • Size

    164KB

  • Sample

    240817-t28fyavgma

  • MD5

    a34b1a88f1eb7a27ddd71408d9ca6373

  • SHA1

    1d363d77ff4866acc2572cd36c4098fc4b60311b

  • SHA256

    0ca4f84f42c000128a1451ffafb83a1bc482fcb79dc5ff4a4b1263d7a9313391

  • SHA512

    7779f6155360470207acef2292e843043148b9dd3b4778cf06c24af41211d257bbafa49a918faa189d67ba666ad255f0d2e07c3294d70ca0a9d72c25843a5618

  • SSDEEP

    3072:J1V+vpDx7DUQrMrXxomqF0uMfbaqPR7sOdBvFBnBXit/ba82MnJI:XMXDUQrOqFXMzaqNs8vATa82M

Malware Config

Extracted

Family

dridex

Botnet

111

C2

172.86.186.22:3889

46.105.131.78:14431

103.244.206.74:33443

139.162.53.147:4443

rc4.plain
rc4.plain

Targets

    • Target

      a34b1a88f1eb7a27ddd71408d9ca6373_JaffaCakes118

    • Size

      164KB

    • MD5

      a34b1a88f1eb7a27ddd71408d9ca6373

    • SHA1

      1d363d77ff4866acc2572cd36c4098fc4b60311b

    • SHA256

      0ca4f84f42c000128a1451ffafb83a1bc482fcb79dc5ff4a4b1263d7a9313391

    • SHA512

      7779f6155360470207acef2292e843043148b9dd3b4778cf06c24af41211d257bbafa49a918faa189d67ba666ad255f0d2e07c3294d70ca0a9d72c25843a5618

    • SSDEEP

      3072:J1V+vpDx7DUQrMrXxomqF0uMfbaqPR7sOdBvFBnBXit/ba82MnJI:XMXDUQrOqFXMzaqNs8vATa82M

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks