General

  • Target

    JaffaCakes118_099727aeca75e1e5e72708ab7dfa3078631d05df46b936aa9ceb06536591dbe8

  • Size

    170KB

  • Sample

    241230-y1ymkazkgs

  • MD5

    732f1cf67463c4e9d7c1423218c560f8

  • SHA1

    c8544daf4368a09738898ed7cbc629fe56c0d6b6

  • SHA256

    099727aeca75e1e5e72708ab7dfa3078631d05df46b936aa9ceb06536591dbe8

  • SHA512

    3eb8432fdc4154610249e6c4f05abc96c6732384f47c6c1f14e7729b3cd2e6f62ce737bd1bb5eef27777d770aa7def465c63a0282928dfea27b9d828df45a664

  • SSDEEP

    3072:kV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:kV/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_099727aeca75e1e5e72708ab7dfa3078631d05df46b936aa9ceb06536591dbe8

    • Size

      170KB

    • MD5

      732f1cf67463c4e9d7c1423218c560f8

    • SHA1

      c8544daf4368a09738898ed7cbc629fe56c0d6b6

    • SHA256

      099727aeca75e1e5e72708ab7dfa3078631d05df46b936aa9ceb06536591dbe8

    • SHA512

      3eb8432fdc4154610249e6c4f05abc96c6732384f47c6c1f14e7729b3cd2e6f62ce737bd1bb5eef27777d770aa7def465c63a0282928dfea27b9d828df45a664

    • SSDEEP

      3072:kV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:kV/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks