General

  • Target

    JaffaCakes118_a53d92dcfb04cd4610583df80d05fdf86f942e1eda3f008e992b992de013d4c5

  • Size

    160KB

  • Sample

    241230-2hq2jsvlew

  • MD5

    0e098009c7071a9735791c0ec1b304fd

  • SHA1

    8a3a5fbd753d778c3b06129d8b913f1bd6e369e9

  • SHA256

    a53d92dcfb04cd4610583df80d05fdf86f942e1eda3f008e992b992de013d4c5

  • SHA512

    9df3483bfa31f99116e679682414cb509a1556b757a186bd5b6b23f7652dc7906feb4a7267d29e4a4478b929c5ad5800e72f0151238fa7ac0953071afee39096

  • SSDEEP

    3072:XO5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8PH6:+52j4pk5zMbVO6/HUIXU8KgMyP

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

188.226.199.7:443

46.101.216.218:8172

178.254.33.197:2303

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a53d92dcfb04cd4610583df80d05fdf86f942e1eda3f008e992b992de013d4c5

    • Size

      160KB

    • MD5

      0e098009c7071a9735791c0ec1b304fd

    • SHA1

      8a3a5fbd753d778c3b06129d8b913f1bd6e369e9

    • SHA256

      a53d92dcfb04cd4610583df80d05fdf86f942e1eda3f008e992b992de013d4c5

    • SHA512

      9df3483bfa31f99116e679682414cb509a1556b757a186bd5b6b23f7652dc7906feb4a7267d29e4a4478b929c5ad5800e72f0151238fa7ac0953071afee39096

    • SSDEEP

      3072:XO5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8PH6:+52j4pk5zMbVO6/HUIXU8KgMyP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks