General

  • Target

    JaffaCakes118_407922cdedade4dd01da4bd3f569eb94df0e9d89278c3d0f3bd923bdb5b38340

  • Size

    177KB

  • Sample

    241230-ftcgmsyqel

  • MD5

    ffdbfb4c27abf966942b2991e0ea3667

  • SHA1

    960912207af570dfe056071a71665f1627c52b73

  • SHA256

    407922cdedade4dd01da4bd3f569eb94df0e9d89278c3d0f3bd923bdb5b38340

  • SHA512

    e22c6fbcde2a40753f4b5244ea43a2fe7991eaea9f86e417b9b0b78b433c085ca5e4c763b1f0474ebbab01912353683cfb6dc6e746de9c7e9c245f866918800a

  • SSDEEP

    3072:EuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:YzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_407922cdedade4dd01da4bd3f569eb94df0e9d89278c3d0f3bd923bdb5b38340

    • Size

      177KB

    • MD5

      ffdbfb4c27abf966942b2991e0ea3667

    • SHA1

      960912207af570dfe056071a71665f1627c52b73

    • SHA256

      407922cdedade4dd01da4bd3f569eb94df0e9d89278c3d0f3bd923bdb5b38340

    • SHA512

      e22c6fbcde2a40753f4b5244ea43a2fe7991eaea9f86e417b9b0b78b433c085ca5e4c763b1f0474ebbab01912353683cfb6dc6e746de9c7e9c245f866918800a

    • SSDEEP

      3072:EuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:YzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks