General

  • Target

    JaffaCakes118_760372ee7577650a9a87ca509a472d0fb9673108d3d08889c496e1536c26693c

  • Size

    170KB

  • Sample

    241223-v5yatawmgk

  • MD5

    3ff2594d68343369cf8a7ad7c36d82d3

  • SHA1

    f8fcb8051c22848a2369ef19ec7dec849192bb81

  • SHA256

    760372ee7577650a9a87ca509a472d0fb9673108d3d08889c496e1536c26693c

  • SHA512

    6321220e4a96cf5e33a41c59c75c13a430ae8134febfc1895734343a4b5c6f3f1ba75015db6302167b4cc467493ec8c8de84a127f3357cc051835259b90551d8

  • SSDEEP

    3072:oV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:oV/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_760372ee7577650a9a87ca509a472d0fb9673108d3d08889c496e1536c26693c

    • Size

      170KB

    • MD5

      3ff2594d68343369cf8a7ad7c36d82d3

    • SHA1

      f8fcb8051c22848a2369ef19ec7dec849192bb81

    • SHA256

      760372ee7577650a9a87ca509a472d0fb9673108d3d08889c496e1536c26693c

    • SHA512

      6321220e4a96cf5e33a41c59c75c13a430ae8134febfc1895734343a4b5c6f3f1ba75015db6302167b4cc467493ec8c8de84a127f3357cc051835259b90551d8

    • SSDEEP

      3072:oV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:oV/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks