General

  • Target

    JaffaCakes118_96e498e3f49b556d8495a48293758c9feb1b54fa6c93deeeab507565a6173e94

  • Size

    171KB

  • Sample

    241230-1a75eszjel

  • MD5

    ab03043fc217c575a3023a980c1b5db7

  • SHA1

    12ec0661b40209d8412c791e702a9b34b6368d42

  • SHA256

    96e498e3f49b556d8495a48293758c9feb1b54fa6c93deeeab507565a6173e94

  • SHA512

    95eda2a9cf314a9ecb1c47be82aaf76709e2d3b764a192ba040888a07f9a3d61d428182ffc5173f064fa316e67dc5a889dd0677334d2a7cbeffc694d2aad970c

  • SSDEEP

    3072:/i49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:/H9RVaPEmsdHdbQUbd2H3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_96e498e3f49b556d8495a48293758c9feb1b54fa6c93deeeab507565a6173e94

    • Size

      171KB

    • MD5

      ab03043fc217c575a3023a980c1b5db7

    • SHA1

      12ec0661b40209d8412c791e702a9b34b6368d42

    • SHA256

      96e498e3f49b556d8495a48293758c9feb1b54fa6c93deeeab507565a6173e94

    • SHA512

      95eda2a9cf314a9ecb1c47be82aaf76709e2d3b764a192ba040888a07f9a3d61d428182ffc5173f064fa316e67dc5a889dd0677334d2a7cbeffc694d2aad970c

    • SSDEEP

      3072:/i49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:/H9RVaPEmsdHdbQUbd2H3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks