General

  • Target

    JaffaCakes118_7416f7e6c10cdad0f98d52afdc90c1d56fb92b8d800046e4aa747ac3903e8665

  • Size

    170KB

  • Sample

    241230-3xbqvaxpbt

  • MD5

    0c2a69233d41dabea01d32b18232762d

  • SHA1

    4e3d9eb29dacfa7d59fa16940efe917da1f43cd8

  • SHA256

    7416f7e6c10cdad0f98d52afdc90c1d56fb92b8d800046e4aa747ac3903e8665

  • SHA512

    6ebeebe2d116868518d345870a82af2662c6bc4f40913884766e6c23767d0e804e287f89d061bbd01c1f135e30ff904c360804f58cb2cbf177ca304401282834

  • SSDEEP

    3072:5V/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:5V/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7416f7e6c10cdad0f98d52afdc90c1d56fb92b8d800046e4aa747ac3903e8665

    • Size

      170KB

    • MD5

      0c2a69233d41dabea01d32b18232762d

    • SHA1

      4e3d9eb29dacfa7d59fa16940efe917da1f43cd8

    • SHA256

      7416f7e6c10cdad0f98d52afdc90c1d56fb92b8d800046e4aa747ac3903e8665

    • SHA512

      6ebeebe2d116868518d345870a82af2662c6bc4f40913884766e6c23767d0e804e287f89d061bbd01c1f135e30ff904c360804f58cb2cbf177ca304401282834

    • SSDEEP

      3072:5V/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:5V/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks