General

  • Target

    1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118

  • Size

    184KB

  • Sample

    241007-qky96axcnl

  • MD5

    1da4e3fb8f0f99b2eb3446ccfbeca130

  • SHA1

    540693b7f3f22d396c3523c61881359f5e88e386

  • SHA256

    61c8becd45a9a865a60363650950126ff8db1649067dedaa9d8ade448d1fa3cb

  • SHA512

    69fc411079ef562bf937e44a2bdf5a6914550747d0b937c0f8fcff506945b46b9be49d00f13933f61d86b4f3717a481e2a349f83014567f29bef7442897e7be5

  • SSDEEP

    3072:6DHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFpsvQ:SMhP1cq7/16CT9jnR1Vz7is

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      1da4e3fb8f0f99b2eb3446ccfbeca130_JaffaCakes118

    • Size

      184KB

    • MD5

      1da4e3fb8f0f99b2eb3446ccfbeca130

    • SHA1

      540693b7f3f22d396c3523c61881359f5e88e386

    • SHA256

      61c8becd45a9a865a60363650950126ff8db1649067dedaa9d8ade448d1fa3cb

    • SHA512

      69fc411079ef562bf937e44a2bdf5a6914550747d0b937c0f8fcff506945b46b9be49d00f13933f61d86b4f3717a481e2a349f83014567f29bef7442897e7be5

    • SSDEEP

      3072:6DHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFpsvQ:SMhP1cq7/16CT9jnR1Vz7is

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks