General

  • Target

    JaffaCakes118_2e1259e97dcb8281892e6d3419f3797925a1208d578e90fa49d62ab02e790ebd

  • Size

    160KB

  • Sample

    241230-2q7n9ssmep

  • MD5

    30411164e60b0eeda3b6b181385f67ad

  • SHA1

    24c35c813757a36874ae09daf2cd1783809e3546

  • SHA256

    2e1259e97dcb8281892e6d3419f3797925a1208d578e90fa49d62ab02e790ebd

  • SHA512

    674f24705f44401b6d9d5433f2004e6960b7723b99824eb27a1d671b1c4411f91fb327b6c74477fbde4c6e56cb16e0f0b9ee4d5358b3d634bddc077c905fd047

  • SSDEEP

    3072:d+5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8zH6:w52j4pk5zMbVO6/HUIXU8KgMyz

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

188.226.199.7:443

46.101.216.218:8172

178.254.33.197:2303

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2e1259e97dcb8281892e6d3419f3797925a1208d578e90fa49d62ab02e790ebd

    • Size

      160KB

    • MD5

      30411164e60b0eeda3b6b181385f67ad

    • SHA1

      24c35c813757a36874ae09daf2cd1783809e3546

    • SHA256

      2e1259e97dcb8281892e6d3419f3797925a1208d578e90fa49d62ab02e790ebd

    • SHA512

      674f24705f44401b6d9d5433f2004e6960b7723b99824eb27a1d671b1c4411f91fb327b6c74477fbde4c6e56cb16e0f0b9ee4d5358b3d634bddc077c905fd047

    • SSDEEP

      3072:d+5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8zH6:w52j4pk5zMbVO6/HUIXU8KgMyz

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks