General

  • Target

    JaffaCakes118_8ffc27f2edf8761886b5284af69e05748a692d70ecec672d92f62f5f71d82b6e

  • Size

    184KB

  • Sample

    241230-xbtfwatjhm

  • MD5

    fb10e8d7733212052c35166fcbdd8443

  • SHA1

    8a8831273374b15fd7d9b4b61a3da113361b24de

  • SHA256

    8ffc27f2edf8761886b5284af69e05748a692d70ecec672d92f62f5f71d82b6e

  • SHA512

    fd615cbecb2310489c7f146b166819eaef8e0a0d88539ab1ddc4839ec9ff643c40ba49e94ef02e7c708255165bdca3cf7873300025c888de50951f67225e0d95

  • SSDEEP

    3072:suwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Kvlmsb:y7TXYsd9SkONU1jKGlslm

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8ffc27f2edf8761886b5284af69e05748a692d70ecec672d92f62f5f71d82b6e

    • Size

      184KB

    • MD5

      fb10e8d7733212052c35166fcbdd8443

    • SHA1

      8a8831273374b15fd7d9b4b61a3da113361b24de

    • SHA256

      8ffc27f2edf8761886b5284af69e05748a692d70ecec672d92f62f5f71d82b6e

    • SHA512

      fd615cbecb2310489c7f146b166819eaef8e0a0d88539ab1ddc4839ec9ff643c40ba49e94ef02e7c708255165bdca3cf7873300025c888de50951f67225e0d95

    • SSDEEP

      3072:suwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Kvlmsb:y7TXYsd9SkONU1jKGlslm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks