General

  • Target

    5e8bc4eaa08af3edaa1d55c461a290de_JaffaCakes118

  • Size

    184KB

  • Sample

    241019-zdr2yaxenh

  • MD5

    5e8bc4eaa08af3edaa1d55c461a290de

  • SHA1

    9de36f59ff640f25a8a5f33b92f6c527e0e05826

  • SHA256

    b725be3c944642a7d09f5a482be9b5b5e4d3ffc49b59d49acf5ddf05be45755b

  • SHA512

    5366625bbb9afc29419c28646559936cc92169b3c18f6d094c033430d3ad280f7e23cc3fe4a478eb63ad49ff45e30daaf14da893d18592b8a23a4f69d17d4bb2

  • SSDEEP

    3072:zdMzjc3hsj4S/T54/jA03FNzy/SET+88lGBA51FyIqFue:zdhscmTclNbyI

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      5e8bc4eaa08af3edaa1d55c461a290de_JaffaCakes118

    • Size

      184KB

    • MD5

      5e8bc4eaa08af3edaa1d55c461a290de

    • SHA1

      9de36f59ff640f25a8a5f33b92f6c527e0e05826

    • SHA256

      b725be3c944642a7d09f5a482be9b5b5e4d3ffc49b59d49acf5ddf05be45755b

    • SHA512

      5366625bbb9afc29419c28646559936cc92169b3c18f6d094c033430d3ad280f7e23cc3fe4a478eb63ad49ff45e30daaf14da893d18592b8a23a4f69d17d4bb2

    • SSDEEP

      3072:zdMzjc3hsj4S/T54/jA03FNzy/SET+88lGBA51FyIqFue:zdhscmTclNbyI

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks