General

  • Target

    JaffaCakes118_bd7b8a662cf17bfcb1a7fe4286c5f405938809a2c2c3feb3866af5fa80de1396

  • Size

    160KB

  • Sample

    241230-ymdegaymes

  • MD5

    9240ba9d4223cec4e109d7374e2e1ac6

  • SHA1

    0c1de6d06677f9b5142ee8ef841082a28163e610

  • SHA256

    bd7b8a662cf17bfcb1a7fe4286c5f405938809a2c2c3feb3866af5fa80de1396

  • SHA512

    07ac3a13b90cabb8595cb50998eb8f398eb99989bdaf27c82cfd98164e00ab453e621ee5ff975d037262d2a1c203ec23eba7284f5ae6f182bb94f49a457b5d6a

  • SSDEEP

    3072:+kOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:s8mnT7Fmsans1+0Hw7/t

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

185.148.168.240:443

162.216.125.131:2303

193.200.130.178:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bd7b8a662cf17bfcb1a7fe4286c5f405938809a2c2c3feb3866af5fa80de1396

    • Size

      160KB

    • MD5

      9240ba9d4223cec4e109d7374e2e1ac6

    • SHA1

      0c1de6d06677f9b5142ee8ef841082a28163e610

    • SHA256

      bd7b8a662cf17bfcb1a7fe4286c5f405938809a2c2c3feb3866af5fa80de1396

    • SHA512

      07ac3a13b90cabb8595cb50998eb8f398eb99989bdaf27c82cfd98164e00ab453e621ee5ff975d037262d2a1c203ec23eba7284f5ae6f182bb94f49a457b5d6a

    • SSDEEP

      3072:+kOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:s8mnT7Fmsans1+0Hw7/t

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks