General

  • Target

    JaffaCakes118_8d30f42d6d08bbfde167cc8706c08132bb220f7fa479d447001b65f82023cd31

  • Size

    161KB

  • Sample

    241230-fkh8tsyngj

  • MD5

    70802dfdb01605d78d96d3f815866335

  • SHA1

    8bfa39e3619dd369199a77e9d25f76492d440042

  • SHA256

    8d30f42d6d08bbfde167cc8706c08132bb220f7fa479d447001b65f82023cd31

  • SHA512

    8e295039ecf873aecdce50bbc2b5ec16db0fc1768daadfb3b299fc63ba7e9080c5124c2b2bd378f6b14c69b713aeee2fd4a666d112edc1fb8bdbcff0b2b78b2d

  • SSDEEP

    3072:+k2X+QFg3UutDvUvoU8pz6EJEEhu6Tzace9kuaGA81/YXKHML/Yp8AF:4G3rUvoU4JE/Wzan9T7B/CKsL/Yy

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8d30f42d6d08bbfde167cc8706c08132bb220f7fa479d447001b65f82023cd31

    • Size

      161KB

    • MD5

      70802dfdb01605d78d96d3f815866335

    • SHA1

      8bfa39e3619dd369199a77e9d25f76492d440042

    • SHA256

      8d30f42d6d08bbfde167cc8706c08132bb220f7fa479d447001b65f82023cd31

    • SHA512

      8e295039ecf873aecdce50bbc2b5ec16db0fc1768daadfb3b299fc63ba7e9080c5124c2b2bd378f6b14c69b713aeee2fd4a666d112edc1fb8bdbcff0b2b78b2d

    • SSDEEP

      3072:+k2X+QFg3UutDvUvoU8pz6EJEEhu6Tzace9kuaGA81/YXKHML/Yp8AF:4G3rUvoU4JE/Wzan9T7B/CKsL/Yy

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks