General

  • Target

    JaffaCakes118_d7cd41d8c8497a4dd5344d6b34058db7ff4359fd13f5b323034805c0c027079c

  • Size

    178KB

  • Sample

    241230-vtn8rstjd1

  • MD5

    92f133f80475a8df91542dfcc4e7528a

  • SHA1

    5a723f9d0f8fec51324ba6dc7c81896a09214895

  • SHA256

    d7cd41d8c8497a4dd5344d6b34058db7ff4359fd13f5b323034805c0c027079c

  • SHA512

    18bab643fcf8bb170ffd890137c6e021b470a869d6b0c06242ec12eef0763fb7905e833da971e03fa9da7ca449dd57c82c27a00aa84df6ab4f5c3baa00e6283c

  • SSDEEP

    3072:rZUVAk9rsXo3/Ifz/uUXF2mSPBxv1tM7lt8jPU6/pyagsuAtuUucGZ2:rUAk9I4vgz/V2dulz6/hvHhG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

142.93.223.149:443

128.199.36.62:4664

50.116.54.215:13786

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d7cd41d8c8497a4dd5344d6b34058db7ff4359fd13f5b323034805c0c027079c

    • Size

      178KB

    • MD5

      92f133f80475a8df91542dfcc4e7528a

    • SHA1

      5a723f9d0f8fec51324ba6dc7c81896a09214895

    • SHA256

      d7cd41d8c8497a4dd5344d6b34058db7ff4359fd13f5b323034805c0c027079c

    • SHA512

      18bab643fcf8bb170ffd890137c6e021b470a869d6b0c06242ec12eef0763fb7905e833da971e03fa9da7ca449dd57c82c27a00aa84df6ab4f5c3baa00e6283c

    • SSDEEP

      3072:rZUVAk9rsXo3/Ifz/uUXF2mSPBxv1tM7lt8jPU6/pyagsuAtuUucGZ2:rUAk9I4vgz/V2dulz6/hvHhG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks