General

  • Target

    JaffaCakes118_e7f25d28160bddb41966825c1697b202b3c84b761be9c44165d35050c47048d0

  • Size

    162KB

  • Sample

    241221-ww9g6avrfx

  • MD5

    d8b4697ad4b7adfd7e91648b7f8974b7

  • SHA1

    a60a47f084326fca0f01ced5a0923a663a9a6782

  • SHA256

    e7f25d28160bddb41966825c1697b202b3c84b761be9c44165d35050c47048d0

  • SHA512

    8025a0bb24ce2c393d42226964b387c2ea06a60f590e7b81b0cc48163bc247f15be84ef0d7227e055761c9a66a9d235e2f476c538a43d28139fa36c788f0d713

  • SSDEEP

    3072:Kesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLnmU:84+VZQpt5hyPsa1ekiEwT

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e7f25d28160bddb41966825c1697b202b3c84b761be9c44165d35050c47048d0

    • Size

      162KB

    • MD5

      d8b4697ad4b7adfd7e91648b7f8974b7

    • SHA1

      a60a47f084326fca0f01ced5a0923a663a9a6782

    • SHA256

      e7f25d28160bddb41966825c1697b202b3c84b761be9c44165d35050c47048d0

    • SHA512

      8025a0bb24ce2c393d42226964b387c2ea06a60f590e7b81b0cc48163bc247f15be84ef0d7227e055761c9a66a9d235e2f476c538a43d28139fa36c788f0d713

    • SSDEEP

      3072:Kesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLnmU:84+VZQpt5hyPsa1ekiEwT

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks