General

  • Target

    JaffaCakes118_134761670cbbdd9075884f2b801d95c368b99de016a2cf1be1f0629515036983

  • Size

    184KB

  • Sample

    241222-bkes7axmcq

  • MD5

    8f7e645d6116f6e3e49e3d76a5d84500

  • SHA1

    a5664300525d0d970f320a6182697382a1015cb2

  • SHA256

    134761670cbbdd9075884f2b801d95c368b99de016a2cf1be1f0629515036983

  • SHA512

    622ee75bc0d71fae9ffd650ed3454cdfb0feb7c8aff6257b3582d2fad4d49b1327567ee94bef1cd300b8e773c569094877018f122f8c4deeaa42a18736abca1b

  • SSDEEP

    3072:7uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4KIlmsb:57TXYsd9SkONU1jKGlTlm

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_134761670cbbdd9075884f2b801d95c368b99de016a2cf1be1f0629515036983

    • Size

      184KB

    • MD5

      8f7e645d6116f6e3e49e3d76a5d84500

    • SHA1

      a5664300525d0d970f320a6182697382a1015cb2

    • SHA256

      134761670cbbdd9075884f2b801d95c368b99de016a2cf1be1f0629515036983

    • SHA512

      622ee75bc0d71fae9ffd650ed3454cdfb0feb7c8aff6257b3582d2fad4d49b1327567ee94bef1cd300b8e773c569094877018f122f8c4deeaa42a18736abca1b

    • SSDEEP

      3072:7uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4KIlmsb:57TXYsd9SkONU1jKGlTlm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks