General

  • Target

    ce165ecd07eecb42d4ca5dc3d37bbfa3_JaffaCakes118

  • Size

    184KB

  • Sample

    241206-vhevystkan

  • MD5

    ce165ecd07eecb42d4ca5dc3d37bbfa3

  • SHA1

    dbb1b41f8af75b9e0be75d544d5cf8428a92ed1b

  • SHA256

    3e3d6b8018170aebbbf33bf1df9ebfa70170af34189923d3d7bdfed121c67330

  • SHA512

    fe9d420273c2e4a312675461430403a0ca62d16ac9391441b541a9fbc0c77ca3b7022375f25903cca9bba12794ec888e456e87610be720e93dbe85efe2f26f64

  • SSDEEP

    3072:qDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMF3svQ:CMhP1cq7/16CT9jnR1Vz7ii

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723

rc4.plain
rc4.plain

Targets

    • Target

      ce165ecd07eecb42d4ca5dc3d37bbfa3_JaffaCakes118

    • Size

      184KB

    • MD5

      ce165ecd07eecb42d4ca5dc3d37bbfa3

    • SHA1

      dbb1b41f8af75b9e0be75d544d5cf8428a92ed1b

    • SHA256

      3e3d6b8018170aebbbf33bf1df9ebfa70170af34189923d3d7bdfed121c67330

    • SHA512

      fe9d420273c2e4a312675461430403a0ca62d16ac9391441b541a9fbc0c77ca3b7022375f25903cca9bba12794ec888e456e87610be720e93dbe85efe2f26f64

    • SSDEEP

      3072:qDHMD9LnP1KxPqM8/1xYTCKJJ+xpm2s7E7jnR1VzGQiEFMF3svQ:CMhP1cq7/16CT9jnR1Vz7ii

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks