General

  • Target

    JaffaCakes118_c23eb23dd41405532014be7410c367206f261dae7ad8199700fdb5cd908152b0

  • Size

    184KB

  • Sample

    241229-e4nf8asnhs

  • MD5

    b46ecfb187a78d7234ee814a7d9de248

  • SHA1

    bd6cb1183cbe2f0d12c1081bd0b797c8d5a7e4c3

  • SHA256

    c23eb23dd41405532014be7410c367206f261dae7ad8199700fdb5cd908152b0

  • SHA512

    86c972c28e8768e1e5a7665262148fff57fbed2979d1082ef92beb303adfe2aca740deea916104d81d32d2ad450a4b59bdaf7c5283b551a5648ee2a66af8504f

  • SSDEEP

    3072:muwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4KNlmsb:47TXYsd9SkONU1jKGl2lm

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c23eb23dd41405532014be7410c367206f261dae7ad8199700fdb5cd908152b0

    • Size

      184KB

    • MD5

      b46ecfb187a78d7234ee814a7d9de248

    • SHA1

      bd6cb1183cbe2f0d12c1081bd0b797c8d5a7e4c3

    • SHA256

      c23eb23dd41405532014be7410c367206f261dae7ad8199700fdb5cd908152b0

    • SHA512

      86c972c28e8768e1e5a7665262148fff57fbed2979d1082ef92beb303adfe2aca740deea916104d81d32d2ad450a4b59bdaf7c5283b551a5648ee2a66af8504f

    • SSDEEP

      3072:muwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4KNlmsb:47TXYsd9SkONU1jKGl2lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks