General

  • Target

    JaffaCakes118_8fac556eb669fcd3936c70683ac6dd785b8ab9e971dc86c301bdd14c4de47bd9

  • Size

    177KB

  • Sample

    241230-1fyg6ssnex

  • MD5

    2311d84b11fcc153991fe98c858853f3

  • SHA1

    86f383b992c32dbbd2cd07513f28f6ef9e3089cf

  • SHA256

    8fac556eb669fcd3936c70683ac6dd785b8ab9e971dc86c301bdd14c4de47bd9

  • SHA512

    dc654a1349b4760d74f6310e2de4661c3cca78ce7f9f02ec40d060297983349cb0a7e8102e1d47d673a411f9677d23c295599aaaf5d45068353c4aaa489631b0

  • SSDEEP

    3072:8uCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:wzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8fac556eb669fcd3936c70683ac6dd785b8ab9e971dc86c301bdd14c4de47bd9

    • Size

      177KB

    • MD5

      2311d84b11fcc153991fe98c858853f3

    • SHA1

      86f383b992c32dbbd2cd07513f28f6ef9e3089cf

    • SHA256

      8fac556eb669fcd3936c70683ac6dd785b8ab9e971dc86c301bdd14c4de47bd9

    • SHA512

      dc654a1349b4760d74f6310e2de4661c3cca78ce7f9f02ec40d060297983349cb0a7e8102e1d47d673a411f9677d23c295599aaaf5d45068353c4aaa489631b0

    • SSDEEP

      3072:8uCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:wzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks