General

  • Target

    80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118

  • Size

    184KB

  • Sample

    241030-3ttggsspas

  • MD5

    80ab1da34f3e52cf7eaeaf0628aa4c1a

  • SHA1

    c0c5f9ea0d2b4de14ec8f5bfe04c74efd9e556f3

  • SHA256

    2c9be134ebe1cc15fa0fab135a83e6b861ef7978e2fd0ccd25d7bc3d2f2ed578

  • SHA512

    1d8a46545087a7761230e228b601d26b72bb6564a047fb5445b5c3d96030347b4f59cc1bfb2c6e2bbd7180b2572ef4369626af833d9156f6a6842949605feb84

  • SSDEEP

    3072:yDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFZsvQ:6MhP1cq7/16CT9jnR1Vz7i0

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      80ab1da34f3e52cf7eaeaf0628aa4c1a_JaffaCakes118

    • Size

      184KB

    • MD5

      80ab1da34f3e52cf7eaeaf0628aa4c1a

    • SHA1

      c0c5f9ea0d2b4de14ec8f5bfe04c74efd9e556f3

    • SHA256

      2c9be134ebe1cc15fa0fab135a83e6b861ef7978e2fd0ccd25d7bc3d2f2ed578

    • SHA512

      1d8a46545087a7761230e228b601d26b72bb6564a047fb5445b5c3d96030347b4f59cc1bfb2c6e2bbd7180b2572ef4369626af833d9156f6a6842949605feb84

    • SSDEEP

      3072:yDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFZsvQ:6MhP1cq7/16CT9jnR1Vz7i0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks