General

  • Target

    f9cd129d87758bcc632b02e785a61770_JaffaCakes118

  • Size

    184KB

  • Sample

    240927-f5wpnazgjg

  • MD5

    f9cd129d87758bcc632b02e785a61770

  • SHA1

    44b781c1fa2e942ca63e8778594e6136782f2fe7

  • SHA256

    898c5ae1f036965b06a029e399512dd0ca78492529ac62df7daf181d6b89d8d9

  • SHA512

    19913f6049214e629225fc7644a99da6656ae5443fd8fb5e50a595cb8a1c638edb393c7805e8208bf2d8646f320e9bc43afdf7c2d6d929792d18244501e7fcaf

  • SSDEEP

    3072:FAIkqXpPKnXkU64fT/O7fbpvcI2yuOssp5kSmrzzV4S5:FAIkjn0GL/O7lvcITYekSS3V

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

207.148.81.119:443

185.157.82.209:8333

5.39.99.208:5412

rc4.plain
rc4.plain

Targets

    • Target

      f9cd129d87758bcc632b02e785a61770_JaffaCakes118

    • Size

      184KB

    • MD5

      f9cd129d87758bcc632b02e785a61770

    • SHA1

      44b781c1fa2e942ca63e8778594e6136782f2fe7

    • SHA256

      898c5ae1f036965b06a029e399512dd0ca78492529ac62df7daf181d6b89d8d9

    • SHA512

      19913f6049214e629225fc7644a99da6656ae5443fd8fb5e50a595cb8a1c638edb393c7805e8208bf2d8646f320e9bc43afdf7c2d6d929792d18244501e7fcaf

    • SSDEEP

      3072:FAIkqXpPKnXkU64fT/O7fbpvcI2yuOssp5kSmrzzV4S5:FAIkjn0GL/O7lvcITYekSS3V

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks