General

  • Target

    JaffaCakes118_156f6e1bd370d98053af4cad26c6db48bd4d89d729b9cfc64e10095e2ddfca63

  • Size

    160KB

  • Sample

    241230-3dyq9swpcz

  • MD5

    fc290ac3e2df17335c5c7577791fe04d

  • SHA1

    6c12dcbf6695a7e7294687fbceb8eccc0ba62ba6

  • SHA256

    156f6e1bd370d98053af4cad26c6db48bd4d89d729b9cfc64e10095e2ddfca63

  • SHA512

    87c8ce7f37df4d95c9c6a47f35cd0f46eaa7fa548b2044a2f4b8631bd943c7d9995937716b1e39e4c4d9b5909bad2826556fb46cf8a36d0a2d5b7532d70dc3b8

  • SSDEEP

    3072:JgOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:b8mnT7Fmsans1+0Hw7/t

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

185.148.168.240:443

162.216.125.131:2303

193.200.130.178:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_156f6e1bd370d98053af4cad26c6db48bd4d89d729b9cfc64e10095e2ddfca63

    • Size

      160KB

    • MD5

      fc290ac3e2df17335c5c7577791fe04d

    • SHA1

      6c12dcbf6695a7e7294687fbceb8eccc0ba62ba6

    • SHA256

      156f6e1bd370d98053af4cad26c6db48bd4d89d729b9cfc64e10095e2ddfca63

    • SHA512

      87c8ce7f37df4d95c9c6a47f35cd0f46eaa7fa548b2044a2f4b8631bd943c7d9995937716b1e39e4c4d9b5909bad2826556fb46cf8a36d0a2d5b7532d70dc3b8

    • SSDEEP

      3072:JgOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:b8mnT7Fmsans1+0Hw7/t

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks