General

  • Target

    JaffaCakes118_13536b0304f27760944b45e4580db71b6591e5275a5bb6c4649b13d039b905d0

  • Size

    160KB

  • Sample

    241230-xf36wawmdw

  • MD5

    7d09a3cd1211237b8796760a18e3e666

  • SHA1

    c1e4510c03cbe3d1eabf6e812d6225ff8ca2d7d4

  • SHA256

    13536b0304f27760944b45e4580db71b6591e5275a5bb6c4649b13d039b905d0

  • SHA512

    4baec47f663e2e7611e1b940d182d8bfbfe969857b6fdfd8522c888e64308cd782788e5aa84bd636ce443f459b24ab38e66599cc42bfb8c8d77ac7f0a37cf3d6

  • SSDEEP

    3072:9w5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8YH6:G52j4pk5zMbVO6/HUIXU8KgMyY

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

188.226.199.7:443

46.101.216.218:8172

178.254.33.197:2303

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_13536b0304f27760944b45e4580db71b6591e5275a5bb6c4649b13d039b905d0

    • Size

      160KB

    • MD5

      7d09a3cd1211237b8796760a18e3e666

    • SHA1

      c1e4510c03cbe3d1eabf6e812d6225ff8ca2d7d4

    • SHA256

      13536b0304f27760944b45e4580db71b6591e5275a5bb6c4649b13d039b905d0

    • SHA512

      4baec47f663e2e7611e1b940d182d8bfbfe969857b6fdfd8522c888e64308cd782788e5aa84bd636ce443f459b24ab38e66599cc42bfb8c8d77ac7f0a37cf3d6

    • SSDEEP

      3072:9w5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh8YH6:G52j4pk5zMbVO6/HUIXU8KgMyY

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks