General

  • Target

    JaffaCakes118_4cefc872bb60b2de2dc4219959e5bac3444c5631a2b2f9dd7037e1f58a5b645c

  • Size

    170KB

  • Sample

    241230-wffvxatrgs

  • MD5

    f86e018675fcab64f28efd69f20a7a6e

  • SHA1

    316cf6c0d758e911d26bd64e242f4df03c4e497e

  • SHA256

    4cefc872bb60b2de2dc4219959e5bac3444c5631a2b2f9dd7037e1f58a5b645c

  • SHA512

    02e596706662f2aaaebb33b3ae0be3db1e4efb1091ba1553f5055f9af208929c5b44260cc11b6e339db4676cf912ed7d31fe296afaeffd5d99eda6693f8af603

  • SSDEEP

    3072:vV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:vV/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4cefc872bb60b2de2dc4219959e5bac3444c5631a2b2f9dd7037e1f58a5b645c

    • Size

      170KB

    • MD5

      f86e018675fcab64f28efd69f20a7a6e

    • SHA1

      316cf6c0d758e911d26bd64e242f4df03c4e497e

    • SHA256

      4cefc872bb60b2de2dc4219959e5bac3444c5631a2b2f9dd7037e1f58a5b645c

    • SHA512

      02e596706662f2aaaebb33b3ae0be3db1e4efb1091ba1553f5055f9af208929c5b44260cc11b6e339db4676cf912ed7d31fe296afaeffd5d99eda6693f8af603

    • SSDEEP

      3072:vV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:vV/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks