General

  • Target

    JaffaCakes118_dc872f755f51a81fd46160ff1d57ddbc410f54a0c5b3909994e90d2314f56894

  • Size

    170KB

  • Sample

    241230-29wq4swmfy

  • MD5

    6d91d14159dab57e847e79d30cdc2e11

  • SHA1

    11953bc16ffd81c5b5b04436c8e480565d0d41eb

  • SHA256

    dc872f755f51a81fd46160ff1d57ddbc410f54a0c5b3909994e90d2314f56894

  • SHA512

    d1b813df8f98828cd13cb8732128e0ef6c88e3c82a1bd4f23caa6ccb0a333c3c35be1a6cd62b6f953d592f16e752e2331eaa8d80418b3cc56e250a093cd39a32

  • SSDEEP

    3072:xqWLBTrGNr0gl+CI3bc4ThMXu6GkqFmLqmjcRVmkHkKFhG2wwUJ5/lB:nVqNd+CIQHXu9VFmu0qU2CJ5

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_dc872f755f51a81fd46160ff1d57ddbc410f54a0c5b3909994e90d2314f56894

    • Size

      170KB

    • MD5

      6d91d14159dab57e847e79d30cdc2e11

    • SHA1

      11953bc16ffd81c5b5b04436c8e480565d0d41eb

    • SHA256

      dc872f755f51a81fd46160ff1d57ddbc410f54a0c5b3909994e90d2314f56894

    • SHA512

      d1b813df8f98828cd13cb8732128e0ef6c88e3c82a1bd4f23caa6ccb0a333c3c35be1a6cd62b6f953d592f16e752e2331eaa8d80418b3cc56e250a093cd39a32

    • SSDEEP

      3072:xqWLBTrGNr0gl+CI3bc4ThMXu6GkqFmLqmjcRVmkHkKFhG2wwUJ5/lB:nVqNd+CIQHXu9VFmu0qU2CJ5

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks