Resubmissions

09-10-2024 12:15

241009-pe99ssthnm 10

08-10-2024 23:30

241008-3hkefayclr 10

General

  • Target

    27108010544878d38e08c20ff65e75d5_JaffaCakes118

  • Size

    184KB

  • Sample

    241009-pe99ssthnm

  • MD5

    27108010544878d38e08c20ff65e75d5

  • SHA1

    1c7328cf072a827d8864132552f7d02a827c2b82

  • SHA256

    ce4da359be70f340f0d9a9d1773f4199598a031cf4369d520c9b65772aa0e52c

  • SHA512

    c9eb0cf2a3ecc2aaa463c1716892e534992651d2ef126fc88319b201a7f048f927fbcd1478adb8e9f386a0c33f33e020045ed9029bc491c10223bc42fc7700bb

  • SSDEEP

    3072:ODHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFPsvQ:+MhP1cq7/16CT9jnR1Vz7iy

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      27108010544878d38e08c20ff65e75d5_JaffaCakes118

    • Size

      184KB

    • MD5

      27108010544878d38e08c20ff65e75d5

    • SHA1

      1c7328cf072a827d8864132552f7d02a827c2b82

    • SHA256

      ce4da359be70f340f0d9a9d1773f4199598a031cf4369d520c9b65772aa0e52c

    • SHA512

      c9eb0cf2a3ecc2aaa463c1716892e534992651d2ef126fc88319b201a7f048f927fbcd1478adb8e9f386a0c33f33e020045ed9029bc491c10223bc42fc7700bb

    • SSDEEP

      3072:ODHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFPsvQ:+MhP1cq7/16CT9jnR1Vz7iy

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks