General

  • Target

    53effb3a2a288478a7359e02605e48cf_JaffaCakes118

  • Size

    184KB

  • Sample

    241017-1v24xayfpc

  • MD5

    53effb3a2a288478a7359e02605e48cf

  • SHA1

    d20872795118ea96c2e34dfcafaaefd4c406d005

  • SHA256

    b639210e31d44a5de95d3c81742264776e92e191e918499cc7cdbd31d7400ff2

  • SHA512

    ccb5c0d2a0a15fbfc9eb273298ce171400a2bd67d25307892fdc18f56fce4b81ab75aef780547140267bd95aab7a0abf69b3769a8f2a6b26df16ed215f4d60fd

  • SSDEEP

    3072:pKMnveabXQdyI+Fc2z+ELrMXGRj7Bs1aAjlN9DsFrifCu:pXbXQdyI+Fz3LfnkaMdSr

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      53effb3a2a288478a7359e02605e48cf_JaffaCakes118

    • Size

      184KB

    • MD5

      53effb3a2a288478a7359e02605e48cf

    • SHA1

      d20872795118ea96c2e34dfcafaaefd4c406d005

    • SHA256

      b639210e31d44a5de95d3c81742264776e92e191e918499cc7cdbd31d7400ff2

    • SHA512

      ccb5c0d2a0a15fbfc9eb273298ce171400a2bd67d25307892fdc18f56fce4b81ab75aef780547140267bd95aab7a0abf69b3769a8f2a6b26df16ed215f4d60fd

    • SSDEEP

      3072:pKMnveabXQdyI+Fc2z+ELrMXGRj7Bs1aAjlN9DsFrifCu:pXbXQdyI+Fz3LfnkaMdSr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks