General

  • Target

    JaffaCakes118_bc116f28847e62cbce51911baddef7faa9b29061bd43feafc7785a29d94d9edc

  • Size

    178KB

  • Sample

    241224-m9g6dswnal

  • MD5

    eee743c578344f2a3c4a394c2b341a55

  • SHA1

    c95c453a6d5a25e91ee3ca233f7649386062f9b3

  • SHA256

    bc116f28847e62cbce51911baddef7faa9b29061bd43feafc7785a29d94d9edc

  • SHA512

    bcfcd950d5bbd55bc63efddff320558ebfafc6a968867136052c74635c5327fbf893bc91a5ce8ae75a4c53062f549376720b968630f3b01c0c94ece8226b6e14

  • SSDEEP

    3072:rZUVAk9rsXo3/Ifz/uUXF2mSPBxv1tM7lt8jPU6/pyagsuAtuUucGZ2:rUAk9I4vgz/V2dulz6/hvHhG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

142.93.223.149:443

128.199.36.62:4664

50.116.54.215:13786

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bc116f28847e62cbce51911baddef7faa9b29061bd43feafc7785a29d94d9edc

    • Size

      178KB

    • MD5

      eee743c578344f2a3c4a394c2b341a55

    • SHA1

      c95c453a6d5a25e91ee3ca233f7649386062f9b3

    • SHA256

      bc116f28847e62cbce51911baddef7faa9b29061bd43feafc7785a29d94d9edc

    • SHA512

      bcfcd950d5bbd55bc63efddff320558ebfafc6a968867136052c74635c5327fbf893bc91a5ce8ae75a4c53062f549376720b968630f3b01c0c94ece8226b6e14

    • SSDEEP

      3072:rZUVAk9rsXo3/Ifz/uUXF2mSPBxv1tM7lt8jPU6/pyagsuAtuUucGZ2:rUAk9I4vgz/V2dulz6/hvHhG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks