General

  • Target

    JaffaCakes118_092217799aa870cd8fdc0e811af9d3f9c17b7049e2027755ac209e1f7dd7191a

  • Size

    160KB

  • Sample

    241230-zwty9a1nhy

  • MD5

    9ba64458bcd4b92a17c6614e9cff0418

  • SHA1

    21bf6f7a6354467b12b79aa97d6f4070c7e96ac2

  • SHA256

    092217799aa870cd8fdc0e811af9d3f9c17b7049e2027755ac209e1f7dd7191a

  • SHA512

    b192c98ce1874794da607537609b12e482c12c8f296945a5c90619d66d4d10fec5320d84129ef33a429f6c341ba1b6be4d1ec14d7cf742c20992302546b417c6

  • SSDEEP

    3072:Oc5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh81H6:N52j4pk5zMbVO6/HUIXU8KgMy1

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

188.226.199.7:443

46.101.216.218:8172

178.254.33.197:2303

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_092217799aa870cd8fdc0e811af9d3f9c17b7049e2027755ac209e1f7dd7191a

    • Size

      160KB

    • MD5

      9ba64458bcd4b92a17c6614e9cff0418

    • SHA1

      21bf6f7a6354467b12b79aa97d6f4070c7e96ac2

    • SHA256

      092217799aa870cd8fdc0e811af9d3f9c17b7049e2027755ac209e1f7dd7191a

    • SHA512

      b192c98ce1874794da607537609b12e482c12c8f296945a5c90619d66d4d10fec5320d84129ef33a429f6c341ba1b6be4d1ec14d7cf742c20992302546b417c6

    • SSDEEP

      3072:Oc5RgjZh7gpk57/MbVelsxoNTen1v/HuxbIXU89J3WgMh81H6:N52j4pk5zMbVO6/HUIXU8KgMy1

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks