General

  • Target

    JaffaCakes118_878d4d998eb2f5c4ad34ac714b75596583befc12279db5493e88a4da1ed65beb

  • Size

    177KB

  • Sample

    241230-x7jljsvnaq

  • MD5

    96d068092d8c913a3d29c37c9d71be59

  • SHA1

    eff7d46dc80d354448ae9ba9bdca5fdfbd5f87f6

  • SHA256

    878d4d998eb2f5c4ad34ac714b75596583befc12279db5493e88a4da1ed65beb

  • SHA512

    81764ff3924b14d7bb751d13254a29e8ef3f20d4738c557418d0e82fa861aa6ba502072b8550279bf091ae2f2c148ab3e29aca6d5153e14ceb476d54ee6c92cb

  • SSDEEP

    3072:zuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:XzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_878d4d998eb2f5c4ad34ac714b75596583befc12279db5493e88a4da1ed65beb

    • Size

      177KB

    • MD5

      96d068092d8c913a3d29c37c9d71be59

    • SHA1

      eff7d46dc80d354448ae9ba9bdca5fdfbd5f87f6

    • SHA256

      878d4d998eb2f5c4ad34ac714b75596583befc12279db5493e88a4da1ed65beb

    • SHA512

      81764ff3924b14d7bb751d13254a29e8ef3f20d4738c557418d0e82fa861aa6ba502072b8550279bf091ae2f2c148ab3e29aca6d5153e14ceb476d54ee6c92cb

    • SSDEEP

      3072:zuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:XzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks