General

  • Target

    3cb7e466635e20717b0eb4ef31977a0f_JaffaCakes118

  • Size

    184KB

  • Sample

    241012-31qzyaydme

  • MD5

    3cb7e466635e20717b0eb4ef31977a0f

  • SHA1

    88d07bbd40fe322081ff4e41d0cf074f14c7dc63

  • SHA256

    0afb44922eec5824a6a863c9d6bb2f66e5914aa17246da96b73b2099c82d4346

  • SHA512

    997404d33d01d2024f574c3ba67d036bce8254d2cf7d3bf772513fb584a6b082f7be52e9b07015f6aff09946ba58d8ad8447f9d5eca24424145273a003106448

  • SSDEEP

    3072:sDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFKsvQ:wMhP1cq7/16CT9jnR1Vz7i5

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      3cb7e466635e20717b0eb4ef31977a0f_JaffaCakes118

    • Size

      184KB

    • MD5

      3cb7e466635e20717b0eb4ef31977a0f

    • SHA1

      88d07bbd40fe322081ff4e41d0cf074f14c7dc63

    • SHA256

      0afb44922eec5824a6a863c9d6bb2f66e5914aa17246da96b73b2099c82d4346

    • SHA512

      997404d33d01d2024f574c3ba67d036bce8254d2cf7d3bf772513fb584a6b082f7be52e9b07015f6aff09946ba58d8ad8447f9d5eca24424145273a003106448

    • SSDEEP

      3072:sDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFKsvQ:wMhP1cq7/16CT9jnR1Vz7i5

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks