General

  • Target

    JaffaCakes118_0409e76f5588b7c527df674722781f89c70232b53b95546c98ff76fc37676d5c

  • Size

    160KB

  • Sample

    241230-wdvahstrbw

  • MD5

    949a2984d3b8919091396c76b38588d9

  • SHA1

    194a81d325a8a6d7b6abdaa9231717a857afa861

  • SHA256

    0409e76f5588b7c527df674722781f89c70232b53b95546c98ff76fc37676d5c

  • SHA512

    ba6f2ab97bdbf7dd279926be514eb4fb4a064d959ac116b5fa94f9ae847f58c1be3b41bf2cc34f6756eca8c7fcf56dc5c0b1aca0a2eefb23cf5f455cdfdac56d

  • SSDEEP

    3072:zF5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8DH6:Z52j4pk5zMbVO6/HUIXU8KgMyD

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

188.226.199.7:443

46.101.216.218:8172

178.254.33.197:2303

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0409e76f5588b7c527df674722781f89c70232b53b95546c98ff76fc37676d5c

    • Size

      160KB

    • MD5

      949a2984d3b8919091396c76b38588d9

    • SHA1

      194a81d325a8a6d7b6abdaa9231717a857afa861

    • SHA256

      0409e76f5588b7c527df674722781f89c70232b53b95546c98ff76fc37676d5c

    • SHA512

      ba6f2ab97bdbf7dd279926be514eb4fb4a064d959ac116b5fa94f9ae847f58c1be3b41bf2cc34f6756eca8c7fcf56dc5c0b1aca0a2eefb23cf5f455cdfdac56d

    • SSDEEP

      3072:zF5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8DH6:Z52j4pk5zMbVO6/HUIXU8KgMyD

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks