General

  • Target

    21af205a430a4f8e32c6e3ea17ed4fd5_JaffaCakes118

  • Size

    184KB

  • Sample

    241008-qdyeaaydpr

  • MD5

    21af205a430a4f8e32c6e3ea17ed4fd5

  • SHA1

    6f1044e86ec84175fc461c367d985aaedb3a02ed

  • SHA256

    be07c5db23b27b09fe03a4f37882e357f081fa42aa4875504111973019a7ca61

  • SHA512

    4d244a339aed1f32b351209916585d8aae682ec9dc5692c1a6e4dc03ddf07e687650086918c1a5de368c6387891199f57a52983fa8b89f5a51cd5db9ce487eeb

  • SSDEEP

    3072:MDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFcsvQ:QMhP1cq7/16CT9jnR1Vz7iT

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      21af205a430a4f8e32c6e3ea17ed4fd5_JaffaCakes118

    • Size

      184KB

    • MD5

      21af205a430a4f8e32c6e3ea17ed4fd5

    • SHA1

      6f1044e86ec84175fc461c367d985aaedb3a02ed

    • SHA256

      be07c5db23b27b09fe03a4f37882e357f081fa42aa4875504111973019a7ca61

    • SHA512

      4d244a339aed1f32b351209916585d8aae682ec9dc5692c1a6e4dc03ddf07e687650086918c1a5de368c6387891199f57a52983fa8b89f5a51cd5db9ce487eeb

    • SSDEEP

      3072:MDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFcsvQ:QMhP1cq7/16CT9jnR1Vz7iT

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks