General

  • Target

    JaffaCakes118_aa54ed8470a99119420e391595670ad4fb9442fc851cd0df39791714e17575e0

  • Size

    161KB

  • Sample

    241230-315hbsxqe1

  • MD5

    58b4172b43de2b496ff3f18a56c12a03

  • SHA1

    2a401e9a99296ed0043cc44fb73416d63f4b7ffa

  • SHA256

    aa54ed8470a99119420e391595670ad4fb9442fc851cd0df39791714e17575e0

  • SHA512

    077fbb5105894ba2139cafa509e5472a06c7cfd6fe9a1dd6a06c4c63aa33c1f8610dce9103a3a51987d6334a4febceebcb50b5ab3a193a4e27ae875a02a87a2f

  • SSDEEP

    3072:Sk2X+QFg3UutDvUvoU8pz6EJEEhu6Tzace9kuaGA81/YXKHML/Yp8AF:kG3rUvoU4JE/Wzan9T7B/CKsL/Yy

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_aa54ed8470a99119420e391595670ad4fb9442fc851cd0df39791714e17575e0

    • Size

      161KB

    • MD5

      58b4172b43de2b496ff3f18a56c12a03

    • SHA1

      2a401e9a99296ed0043cc44fb73416d63f4b7ffa

    • SHA256

      aa54ed8470a99119420e391595670ad4fb9442fc851cd0df39791714e17575e0

    • SHA512

      077fbb5105894ba2139cafa509e5472a06c7cfd6fe9a1dd6a06c4c63aa33c1f8610dce9103a3a51987d6334a4febceebcb50b5ab3a193a4e27ae875a02a87a2f

    • SSDEEP

      3072:Sk2X+QFg3UutDvUvoU8pz6EJEEhu6Tzace9kuaGA81/YXKHML/Yp8AF:kG3rUvoU4JE/Wzan9T7B/CKsL/Yy

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks