General

  • Target

    75316ce64d70e2cb9673fe898e8db924_JaffaCakes118

  • Size

    184KB

  • Sample

    241024-2zzd9awhqm

  • MD5

    75316ce64d70e2cb9673fe898e8db924

  • SHA1

    ec75b11efcaf8630e6fff8e5cb5b6cdf56cbbc9b

  • SHA256

    5404ada636e6a6437e1c1647ed728bf4d55aff9926d427fb1f43a2b8bf45cf26

  • SHA512

    d344f968f0c81e068a85c90b34d6b7d07d63c57e84e4eb75f39f334a8a88effbc796e3dd84e042b9352a12bf41725904b9c362dcc68938a4fe2b86c4acf97d09

  • SSDEEP

    3072:mDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFwsvQ:mMhP1cq7/16CT9jnR1Vz7i3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      75316ce64d70e2cb9673fe898e8db924_JaffaCakes118

    • Size

      184KB

    • MD5

      75316ce64d70e2cb9673fe898e8db924

    • SHA1

      ec75b11efcaf8630e6fff8e5cb5b6cdf56cbbc9b

    • SHA256

      5404ada636e6a6437e1c1647ed728bf4d55aff9926d427fb1f43a2b8bf45cf26

    • SHA512

      d344f968f0c81e068a85c90b34d6b7d07d63c57e84e4eb75f39f334a8a88effbc796e3dd84e042b9352a12bf41725904b9c362dcc68938a4fe2b86c4acf97d09

    • SSDEEP

      3072:mDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFwsvQ:mMhP1cq7/16CT9jnR1Vz7i3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks