General

  • Target

    JaffaCakes118_0dea5c6194285eeeff5568e2438aa7cba5f8c806a8a4ce91e57e4195595255c1

  • Size

    171KB

  • Sample

    241224-abzxbswjft

  • MD5

    f29085c62e3af2958cc0135020f5d140

  • SHA1

    59e853c566a522bcda76231e6a63f7df9131cd42

  • SHA256

    0dea5c6194285eeeff5568e2438aa7cba5f8c806a8a4ce91e57e4195595255c1

  • SHA512

    1f63f8bde7496270131702a54285a282107e0fb4aa36fa63cc28897907dbaac8a4dced026b73c81c36b95bf75a967bf4e710864ea326a2941b6620864a3e9b35

  • SSDEEP

    3072:wi49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:wH9RVaPEmsdHdbQUbd2H3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0dea5c6194285eeeff5568e2438aa7cba5f8c806a8a4ce91e57e4195595255c1

    • Size

      171KB

    • MD5

      f29085c62e3af2958cc0135020f5d140

    • SHA1

      59e853c566a522bcda76231e6a63f7df9131cd42

    • SHA256

      0dea5c6194285eeeff5568e2438aa7cba5f8c806a8a4ce91e57e4195595255c1

    • SHA512

      1f63f8bde7496270131702a54285a282107e0fb4aa36fa63cc28897907dbaac8a4dced026b73c81c36b95bf75a967bf4e710864ea326a2941b6620864a3e9b35

    • SSDEEP

      3072:wi49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:wH9RVaPEmsdHdbQUbd2H3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks