General

  • Target

    JaffaCakes118_786ffcf32ab9020119b68c574fca1c14f27cd40d3e2018e791fcfd6f02304c59

  • Size

    177KB

  • Sample

    241230-xkaecstnbp

  • MD5

    7b841d7a31b6041cff9893e137e5e63b

  • SHA1

    75468efeae04768448c2dc43995d77ae5b5eb651

  • SHA256

    786ffcf32ab9020119b68c574fca1c14f27cd40d3e2018e791fcfd6f02304c59

  • SHA512

    291769c54af7275a56e847886ca513b1de4a8821d6141c938f81652f8c662bb0b60793191ec7f23f0aeef961a1a8aee2fa347454a8d51ed2ff314169bf206723

  • SSDEEP

    3072:luCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:pzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_786ffcf32ab9020119b68c574fca1c14f27cd40d3e2018e791fcfd6f02304c59

    • Size

      177KB

    • MD5

      7b841d7a31b6041cff9893e137e5e63b

    • SHA1

      75468efeae04768448c2dc43995d77ae5b5eb651

    • SHA256

      786ffcf32ab9020119b68c574fca1c14f27cd40d3e2018e791fcfd6f02304c59

    • SHA512

      291769c54af7275a56e847886ca513b1de4a8821d6141c938f81652f8c662bb0b60793191ec7f23f0aeef961a1a8aee2fa347454a8d51ed2ff314169bf206723

    • SSDEEP

      3072:luCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:pzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks