General

  • Target

    89b8a8c568c561689d88e910ff5cb01a_JaffaCakes118

  • Size

    184KB

  • Sample

    241103-fhzg2awbjl

  • MD5

    89b8a8c568c561689d88e910ff5cb01a

  • SHA1

    3ec837145cd073fdc7557095967938deb451831d

  • SHA256

    850096679a115a3ebea97ed8f2bde92665c05121827fbbb5c1ad369f78a41fd0

  • SHA512

    85bef5b522b0c24c965eb6a83d17767bc3ea5e7221b4b8ca27982da23ea70831b0f7c6950f98ca65841afa46dc150a3374f3e4429d814870831ad9df2ab31a06

  • SSDEEP

    3072:LDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFQsvQ:XMhP1cq7/16CT9jnR1Vz7if

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      89b8a8c568c561689d88e910ff5cb01a_JaffaCakes118

    • Size

      184KB

    • MD5

      89b8a8c568c561689d88e910ff5cb01a

    • SHA1

      3ec837145cd073fdc7557095967938deb451831d

    • SHA256

      850096679a115a3ebea97ed8f2bde92665c05121827fbbb5c1ad369f78a41fd0

    • SHA512

      85bef5b522b0c24c965eb6a83d17767bc3ea5e7221b4b8ca27982da23ea70831b0f7c6950f98ca65841afa46dc150a3374f3e4429d814870831ad9df2ab31a06

    • SSDEEP

      3072:LDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFQsvQ:XMhP1cq7/16CT9jnR1Vz7if

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks