General

  • Target

    JaffaCakes118_87d726c353a1aeda0a40ae27f8bd3102fd98b4c76902ab618279ecf6b7951103

  • Size

    171KB

  • Sample

    241223-zxwjga1mhs

  • MD5

    ef05b275f26c097577b64581f145896d

  • SHA1

    1c0aee72c2a601ca532eb38664f23ae2e709e074

  • SHA256

    87d726c353a1aeda0a40ae27f8bd3102fd98b4c76902ab618279ecf6b7951103

  • SHA512

    3840f741302c3cf55b881be160bc059cdc91065853d3337de289af07bfeac01e7e76557a4b36c0848e1774a3e3f10f3143b19285ae4f8842a7dbbed719154c85

  • SSDEEP

    3072:Vi49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:VH9RVaPEmsdHdbQUbd2H3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_87d726c353a1aeda0a40ae27f8bd3102fd98b4c76902ab618279ecf6b7951103

    • Size

      171KB

    • MD5

      ef05b275f26c097577b64581f145896d

    • SHA1

      1c0aee72c2a601ca532eb38664f23ae2e709e074

    • SHA256

      87d726c353a1aeda0a40ae27f8bd3102fd98b4c76902ab618279ecf6b7951103

    • SHA512

      3840f741302c3cf55b881be160bc059cdc91065853d3337de289af07bfeac01e7e76557a4b36c0848e1774a3e3f10f3143b19285ae4f8842a7dbbed719154c85

    • SSDEEP

      3072:Vi49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:VH9RVaPEmsdHdbQUbd2H3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks