General

  • Target

    JaffaCakes118_ad733462e5109014e82f2b9fbfc492e9245f874b6088765ee29602d33ec47ce7

  • Size

    170KB

  • Sample

    241230-3qw37sxldv

  • MD5

    ace66861d9b4ed9e168adaf2b1554296

  • SHA1

    d36a7305c811eb3df37e2fb8fe0a73dcba22843f

  • SHA256

    ad733462e5109014e82f2b9fbfc492e9245f874b6088765ee29602d33ec47ce7

  • SHA512

    e859fd0d2c5dc2f5954dae5b9d8d8d56cc915b09c7bb886403049ff3dc755025e64b9b0610958e3fc6f166cc06da0f4a5930c1b47ef8225f2cebae24903b0e4d

  • SSDEEP

    3072:qV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:qV/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ad733462e5109014e82f2b9fbfc492e9245f874b6088765ee29602d33ec47ce7

    • Size

      170KB

    • MD5

      ace66861d9b4ed9e168adaf2b1554296

    • SHA1

      d36a7305c811eb3df37e2fb8fe0a73dcba22843f

    • SHA256

      ad733462e5109014e82f2b9fbfc492e9245f874b6088765ee29602d33ec47ce7

    • SHA512

      e859fd0d2c5dc2f5954dae5b9d8d8d56cc915b09c7bb886403049ff3dc755025e64b9b0610958e3fc6f166cc06da0f4a5930c1b47ef8225f2cebae24903b0e4d

    • SSDEEP

      3072:qV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:qV/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks