General

  • Target

    JaffaCakes118_15363fb7328ada97180a182eaa6a8e9752ff08c4d9d2b9ce488cf76c7cd86cb1

  • Size

    170KB

  • Sample

    241223-wtyymsxjdk

  • MD5

    d3e968f2057c21dec20d84c6a00fa5ed

  • SHA1

    93908471a368b527d74e95708352708d75ad5a14

  • SHA256

    15363fb7328ada97180a182eaa6a8e9752ff08c4d9d2b9ce488cf76c7cd86cb1

  • SHA512

    1c9169ae7da1a2dcaa6d78e3ddc69cb267b7522c13b5c1c6bc3fe1645a2833f35e2d77a435f2b53c6b442d8eb3c32f276449a07a1589649581f62976bed5003b

  • SSDEEP

    3072:/V/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:/V/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_15363fb7328ada97180a182eaa6a8e9752ff08c4d9d2b9ce488cf76c7cd86cb1

    • Size

      170KB

    • MD5

      d3e968f2057c21dec20d84c6a00fa5ed

    • SHA1

      93908471a368b527d74e95708352708d75ad5a14

    • SHA256

      15363fb7328ada97180a182eaa6a8e9752ff08c4d9d2b9ce488cf76c7cd86cb1

    • SHA512

      1c9169ae7da1a2dcaa6d78e3ddc69cb267b7522c13b5c1c6bc3fe1645a2833f35e2d77a435f2b53c6b442d8eb3c32f276449a07a1589649581f62976bed5003b

    • SSDEEP

      3072:/V/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:/V/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks