General

  • Target

    JaffaCakes118_93da2124cab70706a28833bffc99737b24fd6fb31aa688181333e8ebfdaaa34c

  • Size

    160KB

  • Sample

    241230-28c8datkan

  • MD5

    c3c6166ba1453398c2a23fd29fbd2a49

  • SHA1

    5a90e2ceb5cd9d750e37e99016808ff9961cd380

  • SHA256

    93da2124cab70706a28833bffc99737b24fd6fb31aa688181333e8ebfdaaa34c

  • SHA512

    777489912ea6c9fcab551e2caf8f7bc356a37a87a1f6bda4e67293f377a24705967250d82fad07ecbac48ef44d39e64c1bc894b26556fa539e5c9da6f928ff92

  • SSDEEP

    3072:W6On8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:u8mnT7Fmsans1+0Hw7/t

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

185.148.168.240:443

162.216.125.131:2303

193.200.130.178:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_93da2124cab70706a28833bffc99737b24fd6fb31aa688181333e8ebfdaaa34c

    • Size

      160KB

    • MD5

      c3c6166ba1453398c2a23fd29fbd2a49

    • SHA1

      5a90e2ceb5cd9d750e37e99016808ff9961cd380

    • SHA256

      93da2124cab70706a28833bffc99737b24fd6fb31aa688181333e8ebfdaaa34c

    • SHA512

      777489912ea6c9fcab551e2caf8f7bc356a37a87a1f6bda4e67293f377a24705967250d82fad07ecbac48ef44d39e64c1bc894b26556fa539e5c9da6f928ff92

    • SSDEEP

      3072:W6On8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:u8mnT7Fmsans1+0Hw7/t

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks