General

  • Target

    JaffaCakes118_465fa3b5adf9e3bef4fa60a5bc6338aad03277a2dbb12901c1b7c4dfab67ba1a

  • Size

    166KB

  • Sample

    241222-x28ngswncs

  • MD5

    5ec47ddefe2acca9f915a0e989ac25a2

  • SHA1

    b900df0568423bd5393521a256ee0338460165fb

  • SHA256

    465fa3b5adf9e3bef4fa60a5bc6338aad03277a2dbb12901c1b7c4dfab67ba1a

  • SHA512

    bf2958a3ac6777ea91ed0889322aac33b16ace7b95571afa9fe004a5ee1036ac6a4ea9e702ec170926ba08d52bcc7b56bfa9397bd15106b5844dc9dcfbf388c1

  • SSDEEP

    3072:juFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:j0czbty9uiaJlHE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_465fa3b5adf9e3bef4fa60a5bc6338aad03277a2dbb12901c1b7c4dfab67ba1a

    • Size

      166KB

    • MD5

      5ec47ddefe2acca9f915a0e989ac25a2

    • SHA1

      b900df0568423bd5393521a256ee0338460165fb

    • SHA256

      465fa3b5adf9e3bef4fa60a5bc6338aad03277a2dbb12901c1b7c4dfab67ba1a

    • SHA512

      bf2958a3ac6777ea91ed0889322aac33b16ace7b95571afa9fe004a5ee1036ac6a4ea9e702ec170926ba08d52bcc7b56bfa9397bd15106b5844dc9dcfbf388c1

    • SSDEEP

      3072:juFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:j0czbty9uiaJlHE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks