General

  • Target

    JaffaCakes118_0f13e5442bad3a868c75e886d8f410f266a11a581b24218c862c29b4070491ce

  • Size

    178KB

  • Sample

    241230-e46mssyjd1

  • MD5

    f93aaeebcfc26f44d8ebbe5f5079450a

  • SHA1

    2b8c23a26e0c64929762a3ad4a1592f3569628f9

  • SHA256

    0f13e5442bad3a868c75e886d8f410f266a11a581b24218c862c29b4070491ce

  • SHA512

    2853ea15a6a7785f14132cdbbe81862fa337c76bec06f9dfce80d1cc53d3217ea144b09b6d0d67af42bd8c51ae62602aea527ba404f3bf10b19c98f63bca1c1b

  • SSDEEP

    3072:5ZUVAk9rsXo3/Ifz/uUXF2mSPBxv1tM7lt8jPU6/pyagsuAtuUucGZ2:5UAk9I4vgz/V2dulz6/hvHhG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

142.93.223.149:443

128.199.36.62:4664

50.116.54.215:13786

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0f13e5442bad3a868c75e886d8f410f266a11a581b24218c862c29b4070491ce

    • Size

      178KB

    • MD5

      f93aaeebcfc26f44d8ebbe5f5079450a

    • SHA1

      2b8c23a26e0c64929762a3ad4a1592f3569628f9

    • SHA256

      0f13e5442bad3a868c75e886d8f410f266a11a581b24218c862c29b4070491ce

    • SHA512

      2853ea15a6a7785f14132cdbbe81862fa337c76bec06f9dfce80d1cc53d3217ea144b09b6d0d67af42bd8c51ae62602aea527ba404f3bf10b19c98f63bca1c1b

    • SSDEEP

      3072:5ZUVAk9rsXo3/Ifz/uUXF2mSPBxv1tM7lt8jPU6/pyagsuAtuUucGZ2:5UAk9I4vgz/V2dulz6/hvHhG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks