General

  • Target

    JaffaCakes118_fcab09899ef7b729f9996920aca6756a6e490dec8cead713170afd3d378cc726

  • Size

    172KB

  • Sample

    241230-v4qvca1mfn

  • MD5

    1dc59d9311263c70f6c0598aaee52b8b

  • SHA1

    467dbba15b61cdce10758919bab9561effc17bf0

  • SHA256

    fcab09899ef7b729f9996920aca6756a6e490dec8cead713170afd3d378cc726

  • SHA512

    ee1808505214268f155b6ec347b799b23da32415e8405d00baa8ae243369854766297e269ae7e9f3733f77a2356e8022b71fc8e814e99757e0e2c55b8eb651a6

  • SSDEEP

    3072:AWpY/Syz2ita3Un6oaxewXvR2GNYHj8z+7/VczU9vh46WIOY4zmo3zAGW+r:AWpY/S8Z83VewfR2GyxVcA5hvjRCmikG

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fcab09899ef7b729f9996920aca6756a6e490dec8cead713170afd3d378cc726

    • Size

      172KB

    • MD5

      1dc59d9311263c70f6c0598aaee52b8b

    • SHA1

      467dbba15b61cdce10758919bab9561effc17bf0

    • SHA256

      fcab09899ef7b729f9996920aca6756a6e490dec8cead713170afd3d378cc726

    • SHA512

      ee1808505214268f155b6ec347b799b23da32415e8405d00baa8ae243369854766297e269ae7e9f3733f77a2356e8022b71fc8e814e99757e0e2c55b8eb651a6

    • SSDEEP

      3072:AWpY/Syz2ita3Un6oaxewXvR2GNYHj8z+7/VczU9vh46WIOY4zmo3zAGW+r:AWpY/S8Z83VewfR2GyxVcA5hvjRCmikG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks