General

  • Target

    JaffaCakes118_1398cfbdcdd479b44863a8bc21568a27e7ec9e28d389f618485d3d0910986203

  • Size

    170KB

  • Sample

    241224-atr97swqek

  • MD5

    215bd7ffb3f91a377a52678482ed7067

  • SHA1

    382cace602531bf1020576e8894eac596fd2ac7f

  • SHA256

    1398cfbdcdd479b44863a8bc21568a27e7ec9e28d389f618485d3d0910986203

  • SHA512

    cd9d3f551ec5abaa742b37cfd9f5e21c136426a2834c1b56d26d7eb03795fc2717a5dbd9949a2b1a95c3cd4061a562baeeb6d5cfe1e8985cac530ca97a3d6402

  • SSDEEP

    3072:sV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:sV/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1398cfbdcdd479b44863a8bc21568a27e7ec9e28d389f618485d3d0910986203

    • Size

      170KB

    • MD5

      215bd7ffb3f91a377a52678482ed7067

    • SHA1

      382cace602531bf1020576e8894eac596fd2ac7f

    • SHA256

      1398cfbdcdd479b44863a8bc21568a27e7ec9e28d389f618485d3d0910986203

    • SHA512

      cd9d3f551ec5abaa742b37cfd9f5e21c136426a2834c1b56d26d7eb03795fc2717a5dbd9949a2b1a95c3cd4061a562baeeb6d5cfe1e8985cac530ca97a3d6402

    • SSDEEP

      3072:sV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:sV/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks