General

  • Target

    JaffaCakes118_fdcb6cb210348b8ff877b1bd5fc8741da6be4e262c1029772940f36020f88bce

  • Size

    160KB

  • Sample

    241230-fk6zwsyndz

  • MD5

    646988ecf27b8d77203cf2300cc31a45

  • SHA1

    edc6d40854e9f56d714917d6fda09851be2bcda6

  • SHA256

    fdcb6cb210348b8ff877b1bd5fc8741da6be4e262c1029772940f36020f88bce

  • SHA512

    7674b22c1c865950632f2b06c746f73d18d02c55d42700a1bfe98a54a335a35a0869cd5a41bd72ff1f17558d0da3818ca08d63cda1205c84839fc8f662d00569

  • SSDEEP

    3072:Hs5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8kH6:M52j4pk5zMbVO6/HUIXU8KgMyk

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

188.226.199.7:443

46.101.216.218:8172

178.254.33.197:2303

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fdcb6cb210348b8ff877b1bd5fc8741da6be4e262c1029772940f36020f88bce

    • Size

      160KB

    • MD5

      646988ecf27b8d77203cf2300cc31a45

    • SHA1

      edc6d40854e9f56d714917d6fda09851be2bcda6

    • SHA256

      fdcb6cb210348b8ff877b1bd5fc8741da6be4e262c1029772940f36020f88bce

    • SHA512

      7674b22c1c865950632f2b06c746f73d18d02c55d42700a1bfe98a54a335a35a0869cd5a41bd72ff1f17558d0da3818ca08d63cda1205c84839fc8f662d00569

    • SSDEEP

      3072:Hs5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8kH6:M52j4pk5zMbVO6/HUIXU8KgMyk

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks