General

  • Target

    d8fdc7428644b131fc21f17e165e640d_JaffaCakes118

  • Size

    320KB

  • Sample

    240910-y8ffysvepa

  • MD5

    d8fdc7428644b131fc21f17e165e640d

  • SHA1

    84c877a62164f808fe457f737e9cd98a251803d0

  • SHA256

    98e5719750aa827bfac863c6b5cf5e191a30be9b34ecce5288b1e8b4ed3511f6

  • SHA512

    03fdb97d02d50f2599ff26069a040db3bcbdaf047f9474cb1763517478b5cd1128cf05f47ffa4b296646cabe36a677e00af279626a266ba648185a70aa637998

  • SSDEEP

    6144:4lT2Mw9oF8K9lYznaQzSyBrh4v3Amu60tm8Qsw/x3XhhMasm/JMi2Fe4:NMyLK9lqIwh4Qmults/VhhMaX2Fd

Malware Config

Extracted

Family

dridex

Botnet

10555

C2

51.75.24.85:443

46.22.116.163:3074

173.249.46.113:3889

192.241.174.45:4443

rc4.plain
rc4.plain

Targets

    • Target

      d8fdc7428644b131fc21f17e165e640d_JaffaCakes118

    • Size

      320KB

    • MD5

      d8fdc7428644b131fc21f17e165e640d

    • SHA1

      84c877a62164f808fe457f737e9cd98a251803d0

    • SHA256

      98e5719750aa827bfac863c6b5cf5e191a30be9b34ecce5288b1e8b4ed3511f6

    • SHA512

      03fdb97d02d50f2599ff26069a040db3bcbdaf047f9474cb1763517478b5cd1128cf05f47ffa4b296646cabe36a677e00af279626a266ba648185a70aa637998

    • SSDEEP

      6144:4lT2Mw9oF8K9lYznaQzSyBrh4v3Amu60tm8Qsw/x3XhhMasm/JMi2Fe4:NMyLK9lqIwh4Qmults/VhhMaX2Fd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

MITRE ATT&CK Enterprise v15

Tasks