General

  • Target

    b4f8465a04d4e270909d40112d86824a_JaffaCakes118

  • Size

    184KB

  • Sample

    241130-f3qevsyqcm

  • MD5

    b4f8465a04d4e270909d40112d86824a

  • SHA1

    8ba75ce0cbfe056297f092539ca4965582159422

  • SHA256

    5b48bafa2e23dfd1485ab15a92d3a85e1ba95cda5da89159d8c86de9a921c12d

  • SHA512

    6d0cc43a7c6d08a31441b26052d9578b097be4d7605af28b5d0cb94b8101a84ea750d3eb674a0a141acd4688bfb0034ece708284297c888ebd4a38362c6b8be4

  • SSDEEP

    3072:lDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFUsvQ:dMhP1cq7/16CT9jnR1Vz7iD

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      b4f8465a04d4e270909d40112d86824a_JaffaCakes118

    • Size

      184KB

    • MD5

      b4f8465a04d4e270909d40112d86824a

    • SHA1

      8ba75ce0cbfe056297f092539ca4965582159422

    • SHA256

      5b48bafa2e23dfd1485ab15a92d3a85e1ba95cda5da89159d8c86de9a921c12d

    • SHA512

      6d0cc43a7c6d08a31441b26052d9578b097be4d7605af28b5d0cb94b8101a84ea750d3eb674a0a141acd4688bfb0034ece708284297c888ebd4a38362c6b8be4

    • SSDEEP

      3072:lDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMFUsvQ:dMhP1cq7/16CT9jnR1Vz7iD

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks