General

  • Target

    36541fa8fae45ef0d7683056f32cd4a7_JaffaCakes118

  • Size

    184KB

  • Sample

    241011-xpfryashkl

  • MD5

    36541fa8fae45ef0d7683056f32cd4a7

  • SHA1

    e56797510f4187c3ff480e25bea90e033e22bbb3

  • SHA256

    4541cd96682e971627ad511f84a05ffc6130333a56cd2938c76d7451d3532d15

  • SHA512

    dd7e8c74e8b055bde72cdb5373706806bda2ba74909e7bcdb6b12c796c64bd1da4f8dcac18e39e24fea75c9a6603658c6e4df3c764e5d1a55809bf547e7da0d4

  • SSDEEP

    3072:JDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFisvQ:pMhP1cq7/16CT9jnR1Vz7ix

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      36541fa8fae45ef0d7683056f32cd4a7_JaffaCakes118

    • Size

      184KB

    • MD5

      36541fa8fae45ef0d7683056f32cd4a7

    • SHA1

      e56797510f4187c3ff480e25bea90e033e22bbb3

    • SHA256

      4541cd96682e971627ad511f84a05ffc6130333a56cd2938c76d7451d3532d15

    • SHA512

      dd7e8c74e8b055bde72cdb5373706806bda2ba74909e7bcdb6b12c796c64bd1da4f8dcac18e39e24fea75c9a6603658c6e4df3c764e5d1a55809bf547e7da0d4

    • SSDEEP

      3072:JDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFisvQ:pMhP1cq7/16CT9jnR1Vz7ix

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks