General

  • Target

    JaffaCakes118_28b167b438f9423f69af59f01fd32fb13b0571b1a15c0171188c8d0c98c15b4b

  • Size

    161KB

  • Sample

    241230-3nndaaxkbv

  • MD5

    9374d4f0729bf6922e2711082357250c

  • SHA1

    cf96155ee84a0079dc1272ff56e96e0f4a253aba

  • SHA256

    28b167b438f9423f69af59f01fd32fb13b0571b1a15c0171188c8d0c98c15b4b

  • SHA512

    da9171a71b19e3f66183f5a18ac63f019f291a069ac3ff3304e1a00c48b9c04fa57d8c52a2a70a2c24add8e046fbf68da0ef0ccc303ae81e2b53244cbf59727f

  • SSDEEP

    3072:VQ2X+QFg3UutDvUvoU8pz6EJEEhu6Tzace9kuaGA81/YXKHML/+p8AF:TG3rUvoU4JE/Wzan9T7B/CKsL/+y

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_28b167b438f9423f69af59f01fd32fb13b0571b1a15c0171188c8d0c98c15b4b

    • Size

      161KB

    • MD5

      9374d4f0729bf6922e2711082357250c

    • SHA1

      cf96155ee84a0079dc1272ff56e96e0f4a253aba

    • SHA256

      28b167b438f9423f69af59f01fd32fb13b0571b1a15c0171188c8d0c98c15b4b

    • SHA512

      da9171a71b19e3f66183f5a18ac63f019f291a069ac3ff3304e1a00c48b9c04fa57d8c52a2a70a2c24add8e046fbf68da0ef0ccc303ae81e2b53244cbf59727f

    • SSDEEP

      3072:VQ2X+QFg3UutDvUvoU8pz6EJEEhu6Tzace9kuaGA81/YXKHML/+p8AF:TG3rUvoU4JE/Wzan9T7B/CKsL/+y

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks