General

  • Target

    JaffaCakes118_efbcf9d40466ef79ab0e65efd902b69710ecca6cf406b49768d6322c5595a22c

  • Size

    177KB

  • Sample

    241230-gf845azner

  • MD5

    8e2b97ba6cb6f2de8430d36cafc8181d

  • SHA1

    7411d1c3f089882c30e6436e59a695be760f79d4

  • SHA256

    efbcf9d40466ef79ab0e65efd902b69710ecca6cf406b49768d6322c5595a22c

  • SHA512

    5d3187229c5761f349d92e2b7189513c532f9588cefcdaf01a9fe3b923e68b5071df3672899a439bc4d907b5b0e19aaac5206b136bb9b5e1f0816cbcb0044edf

  • SSDEEP

    3072:UuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:ozWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_efbcf9d40466ef79ab0e65efd902b69710ecca6cf406b49768d6322c5595a22c

    • Size

      177KB

    • MD5

      8e2b97ba6cb6f2de8430d36cafc8181d

    • SHA1

      7411d1c3f089882c30e6436e59a695be760f79d4

    • SHA256

      efbcf9d40466ef79ab0e65efd902b69710ecca6cf406b49768d6322c5595a22c

    • SHA512

      5d3187229c5761f349d92e2b7189513c532f9588cefcdaf01a9fe3b923e68b5071df3672899a439bc4d907b5b0e19aaac5206b136bb9b5e1f0816cbcb0044edf

    • SSDEEP

      3072:UuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:ozWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks