General

  • Target

    c877524243319a178f38671c3a33eaaf_JaffaCakes118

  • Size

    795KB

  • Sample

    240829-j5e9fs1dpe

  • MD5

    c877524243319a178f38671c3a33eaaf

  • SHA1

    f5da68a8d5ef7b3fab82e19a8b4c1118c9a109bd

  • SHA256

    9e65f5319d3c64a0db0a6c39b4d7be40f98f607c3fb3e5c50d7acc337d2ed4bc

  • SHA512

    1f84f9ce971883ac44c41fbfd8bc6e5dd8c987dde594844c0b46613fcc4b74583fefb2d5ff09d7510993bd3502830dc8d9b34ad33a6677fa6a2200cabdb0ee1c

  • SSDEEP

    24576:YmKQH76xpqoeAehhxyWgePLlN4dLQwClvxya8Hc6vP3v3EfvPWFkv6j:xexpqcehhxyXwLl+9

Malware Config

Extracted

Family

dridex

C2

89.32.150.160:3389

152.46.8.148:884

69.55.238.203:3389

Targets

    • Target

      c877524243319a178f38671c3a33eaaf_JaffaCakes118

    • Size

      795KB

    • MD5

      c877524243319a178f38671c3a33eaaf

    • SHA1

      f5da68a8d5ef7b3fab82e19a8b4c1118c9a109bd

    • SHA256

      9e65f5319d3c64a0db0a6c39b4d7be40f98f607c3fb3e5c50d7acc337d2ed4bc

    • SHA512

      1f84f9ce971883ac44c41fbfd8bc6e5dd8c987dde594844c0b46613fcc4b74583fefb2d5ff09d7510993bd3502830dc8d9b34ad33a6677fa6a2200cabdb0ee1c

    • SSDEEP

      24576:YmKQH76xpqoeAehhxyWgePLlN4dLQwClvxya8Hc6vP3v3EfvPWFkv6j:xexpqcehhxyXwLl+9

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks