General

  • Target

    JaffaCakes118_47a781ef61668d0bea30d27d70ece0fcde0819b0bcfafae81360ce261dda5060

  • Size

    160KB

  • Sample

    241230-ebyrgsxlam

  • MD5

    5b4d3c137acf4a25f0141e65879e88b1

  • SHA1

    72d3659716450f9a7064165e38610f2e7e13b4ad

  • SHA256

    47a781ef61668d0bea30d27d70ece0fcde0819b0bcfafae81360ce261dda5060

  • SHA512

    bb038f51b501ac307a0f4565dd0b2a136680f44018784a9f5a9a96f3d0d7c7349b8444bb00d1a3381075aac84f4ae37877e00cc87b3ee7a630054fe81faeef37

  • SSDEEP

    3072:NM5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8ZH6:O52j4pk5zMbVO6/HUIXU8KgMyZ

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

188.226.199.7:443

46.101.216.218:8172

178.254.33.197:2303

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_47a781ef61668d0bea30d27d70ece0fcde0819b0bcfafae81360ce261dda5060

    • Size

      160KB

    • MD5

      5b4d3c137acf4a25f0141e65879e88b1

    • SHA1

      72d3659716450f9a7064165e38610f2e7e13b4ad

    • SHA256

      47a781ef61668d0bea30d27d70ece0fcde0819b0bcfafae81360ce261dda5060

    • SHA512

      bb038f51b501ac307a0f4565dd0b2a136680f44018784a9f5a9a96f3d0d7c7349b8444bb00d1a3381075aac84f4ae37877e00cc87b3ee7a630054fe81faeef37

    • SSDEEP

      3072:NM5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8ZH6:O52j4pk5zMbVO6/HUIXU8KgMyZ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks