General

  • Target

    JaffaCakes118_abb42c356a92a97492b821e0f6e672031f8c993b3bf261dac893533994e73c09

  • Size

    170KB

  • Sample

    241223-w8pzaaxmbn

  • MD5

    596b2c19e4d63b77027a815b70aa4082

  • SHA1

    a632bda20744665a2664e32cf350dc0812abedcd

  • SHA256

    abb42c356a92a97492b821e0f6e672031f8c993b3bf261dac893533994e73c09

  • SHA512

    35d8c72ccce77a5d93aa9d83b307d0da5ca9c9cbf43cfe97af88069cb9bb39258fb0cc62e6ce9ce012e94eefedd5422eb35fabba00d3e3d8ddd2b9b981c04e48

  • SSDEEP

    3072:wV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:wV/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_abb42c356a92a97492b821e0f6e672031f8c993b3bf261dac893533994e73c09

    • Size

      170KB

    • MD5

      596b2c19e4d63b77027a815b70aa4082

    • SHA1

      a632bda20744665a2664e32cf350dc0812abedcd

    • SHA256

      abb42c356a92a97492b821e0f6e672031f8c993b3bf261dac893533994e73c09

    • SHA512

      35d8c72ccce77a5d93aa9d83b307d0da5ca9c9cbf43cfe97af88069cb9bb39258fb0cc62e6ce9ce012e94eefedd5422eb35fabba00d3e3d8ddd2b9b981c04e48

    • SSDEEP

      3072:wV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:wV/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks