General

  • Target

    3b87e054a89eef924bce0d6591354339_JaffaCakes118

  • Size

    184KB

  • Sample

    241012-xdm2wazcpm

  • MD5

    3b87e054a89eef924bce0d6591354339

  • SHA1

    dab38cf6e95efabebb1c8da29a408da8c61d0993

  • SHA256

    c61450c6b493027fbee727e2835fbf4275d086f73ba093beb24e7bd71057f51a

  • SHA512

    abb4f1ec079be206916eaf19c76f091e8281303952ab9c361c878f98bd16287f2ce7491fc47be32e158d2883d6db2df775e7e5fcf21c1ee1980b31dfd9fe354c

  • SSDEEP

    3072:6DHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFZsvQ:SMhP1cq7/16CT9jnR1Vz7ic

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      3b87e054a89eef924bce0d6591354339_JaffaCakes118

    • Size

      184KB

    • MD5

      3b87e054a89eef924bce0d6591354339

    • SHA1

      dab38cf6e95efabebb1c8da29a408da8c61d0993

    • SHA256

      c61450c6b493027fbee727e2835fbf4275d086f73ba093beb24e7bd71057f51a

    • SHA512

      abb4f1ec079be206916eaf19c76f091e8281303952ab9c361c878f98bd16287f2ce7491fc47be32e158d2883d6db2df775e7e5fcf21c1ee1980b31dfd9fe354c

    • SSDEEP

      3072:6DHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFZsvQ:SMhP1cq7/16CT9jnR1Vz7ic

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks