General

  • Target

    JaffaCakes118_d569c75384a99b263fda90e1bd4b19a928618caa9458550e52780b1a38ae293d

  • Size

    171KB

  • Sample

    241223-2982favmcn

  • MD5

    97cefc6912d851f705342290af2f3a40

  • SHA1

    90e2f37181a799a34cf795e1cddf114baa3c3623

  • SHA256

    d569c75384a99b263fda90e1bd4b19a928618caa9458550e52780b1a38ae293d

  • SHA512

    393cf26ae598a830a3763e43e4141094e125907f7919620349ed6796a746d96b8eea6dc48c9693abc04ee96f2e1142dd547449318ddd69b98f1211d8e8ffa29c

  • SSDEEP

    3072:gi49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:gH9RVaPEmsdHdbQUbd2H3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d569c75384a99b263fda90e1bd4b19a928618caa9458550e52780b1a38ae293d

    • Size

      171KB

    • MD5

      97cefc6912d851f705342290af2f3a40

    • SHA1

      90e2f37181a799a34cf795e1cddf114baa3c3623

    • SHA256

      d569c75384a99b263fda90e1bd4b19a928618caa9458550e52780b1a38ae293d

    • SHA512

      393cf26ae598a830a3763e43e4141094e125907f7919620349ed6796a746d96b8eea6dc48c9693abc04ee96f2e1142dd547449318ddd69b98f1211d8e8ffa29c

    • SSDEEP

      3072:gi49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:gH9RVaPEmsdHdbQUbd2H3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks