General

  • Target

    JaffaCakes118_d168c47bf482403c55dd2380fa299bf52793d1b052ef25e9507ffc88a89956c9

  • Size

    184KB

  • Sample

    241222-w7qjeswkbl

  • MD5

    4e62f680b94d022cf3d416d364a77c12

  • SHA1

    638e5798c8b1120b58e3fda9d5e5beede45e68d0

  • SHA256

    d168c47bf482403c55dd2380fa299bf52793d1b052ef25e9507ffc88a89956c9

  • SHA512

    56b76dbe767cc6d72f7f8cb66ee0f160d539120f6e8f2484e25306df20a8f318e99fda972a067064cd98847a40016b877f9a8f33d49c94e7c1f4ddac8c38be48

  • SSDEEP

    3072:uuwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4K5lmsb:w7TXYsd9SkONU1jKGlWlm

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d168c47bf482403c55dd2380fa299bf52793d1b052ef25e9507ffc88a89956c9

    • Size

      184KB

    • MD5

      4e62f680b94d022cf3d416d364a77c12

    • SHA1

      638e5798c8b1120b58e3fda9d5e5beede45e68d0

    • SHA256

      d168c47bf482403c55dd2380fa299bf52793d1b052ef25e9507ffc88a89956c9

    • SHA512

      56b76dbe767cc6d72f7f8cb66ee0f160d539120f6e8f2484e25306df20a8f318e99fda972a067064cd98847a40016b877f9a8f33d49c94e7c1f4ddac8c38be48

    • SSDEEP

      3072:uuwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4K5lmsb:w7TXYsd9SkONU1jKGlWlm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks