General

  • Target

    JaffaCakes118_7a13ce46000936a8f13281a51d240b76d417065057bd96c4f4934f4a208ae99f

  • Size

    177KB

  • Sample

    241230-3mmqcstqfn

  • MD5

    c3e1c38a1eae517f67f3521f6a6f581c

  • SHA1

    375ea584a714519c6f8989539df479cf95dd255a

  • SHA256

    7a13ce46000936a8f13281a51d240b76d417065057bd96c4f4934f4a208ae99f

  • SHA512

    56ddf5da7adae4b4ecf59526a81f65bf85a3f0f32231a3fced5f818af593551eeae03874935f5a537c2fe72e80d579cdd5fecfe9276375b33a0ea652d8c62c3c

  • SSDEEP

    3072:RuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:9zWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7a13ce46000936a8f13281a51d240b76d417065057bd96c4f4934f4a208ae99f

    • Size

      177KB

    • MD5

      c3e1c38a1eae517f67f3521f6a6f581c

    • SHA1

      375ea584a714519c6f8989539df479cf95dd255a

    • SHA256

      7a13ce46000936a8f13281a51d240b76d417065057bd96c4f4934f4a208ae99f

    • SHA512

      56ddf5da7adae4b4ecf59526a81f65bf85a3f0f32231a3fced5f818af593551eeae03874935f5a537c2fe72e80d579cdd5fecfe9276375b33a0ea652d8c62c3c

    • SSDEEP

      3072:RuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:9zWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks