General

  • Target

    JaffaCakes118_f14bb713bad11cf824b16407be639d388190b3c10a99a3eccf490cf43cd7aacb

  • Size

    160KB

  • Sample

    241230-3bpetatlck

  • MD5

    64fe8633d408ce74e915dbc0f7ed17cd

  • SHA1

    6f2068dd5b2a85866550a647322f821496abad09

  • SHA256

    f14bb713bad11cf824b16407be639d388190b3c10a99a3eccf490cf43cd7aacb

  • SHA512

    f3dac2378fefba5a76f94da13c9fa16c43f7319b46f179d76eba15c6e1e04d7696d64223c949d2256f78630b91d644294605b742eba6eab25ba551ed901c8648

  • SSDEEP

    3072:nM5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8ZH6:M52j4pk5zMbVO6/HUIXU8KgMyZ

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

188.226.199.7:443

46.101.216.218:8172

178.254.33.197:2303

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f14bb713bad11cf824b16407be639d388190b3c10a99a3eccf490cf43cd7aacb

    • Size

      160KB

    • MD5

      64fe8633d408ce74e915dbc0f7ed17cd

    • SHA1

      6f2068dd5b2a85866550a647322f821496abad09

    • SHA256

      f14bb713bad11cf824b16407be639d388190b3c10a99a3eccf490cf43cd7aacb

    • SHA512

      f3dac2378fefba5a76f94da13c9fa16c43f7319b46f179d76eba15c6e1e04d7696d64223c949d2256f78630b91d644294605b742eba6eab25ba551ed901c8648

    • SSDEEP

      3072:nM5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8ZH6:M52j4pk5zMbVO6/HUIXU8KgMyZ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks