General

  • Target

    JaffaCakes118_c29850fd00889d838b674f28acaf6b51bf927954062730ebab051962bb7c1ace

  • Size

    177KB

  • Sample

    241230-d7bq6axjfs

  • MD5

    2359ed4d2084580383140020c10e35f6

  • SHA1

    b9734a81f448438bf3bfdd9d282654db181b68ab

  • SHA256

    c29850fd00889d838b674f28acaf6b51bf927954062730ebab051962bb7c1ace

  • SHA512

    9da35c1e2540152e831c0aaff74998608ebbf776eb33dfbf4ba0bbbdc116c98d56e841507f654f4bd5f8ca6f82299e389227eef416275ab4e88db09a4d1428c1

  • SSDEEP

    3072:OuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:izWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c29850fd00889d838b674f28acaf6b51bf927954062730ebab051962bb7c1ace

    • Size

      177KB

    • MD5

      2359ed4d2084580383140020c10e35f6

    • SHA1

      b9734a81f448438bf3bfdd9d282654db181b68ab

    • SHA256

      c29850fd00889d838b674f28acaf6b51bf927954062730ebab051962bb7c1ace

    • SHA512

      9da35c1e2540152e831c0aaff74998608ebbf776eb33dfbf4ba0bbbdc116c98d56e841507f654f4bd5f8ca6f82299e389227eef416275ab4e88db09a4d1428c1

    • SSDEEP

      3072:OuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:izWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks