General

  • Target

    JaffaCakes118_ccdf1afc5f53b01f895ac5d9536891822d114f3b48c3e41302a2f55b29796a6d

  • Size

    177KB

  • Sample

    241223-vqd9dswjfj

  • MD5

    eca3d923440560ccfa4e25df1ad173ba

  • SHA1

    be7bb4312fd9d8438f7203245b76ddbed8fb7550

  • SHA256

    ccdf1afc5f53b01f895ac5d9536891822d114f3b48c3e41302a2f55b29796a6d

  • SHA512

    1c35b3c75c718c624979cea283eebf8ced56c2205b87d81833d015e33149dc78fa6615e4801d421d8edf9cf9286d1609c45c21359fe60acc60576cf57b15df46

  • SSDEEP

    3072:MuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:AzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ccdf1afc5f53b01f895ac5d9536891822d114f3b48c3e41302a2f55b29796a6d

    • Size

      177KB

    • MD5

      eca3d923440560ccfa4e25df1ad173ba

    • SHA1

      be7bb4312fd9d8438f7203245b76ddbed8fb7550

    • SHA256

      ccdf1afc5f53b01f895ac5d9536891822d114f3b48c3e41302a2f55b29796a6d

    • SHA512

      1c35b3c75c718c624979cea283eebf8ced56c2205b87d81833d015e33149dc78fa6615e4801d421d8edf9cf9286d1609c45c21359fe60acc60576cf57b15df46

    • SSDEEP

      3072:MuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:AzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks