General

  • Target

    JaffaCakes118_4bf82c025a19541983911e700725fc56435a822b1addbcc6aa8f58dbbb2ed1df

  • Size

    177KB

  • Sample

    241223-1a75es1rfz

  • MD5

    d3c60139813e02976c1f82caa8f3e1d2

  • SHA1

    9551d9520df688abf085887b4b05bb1d3702b332

  • SHA256

    4bf82c025a19541983911e700725fc56435a822b1addbcc6aa8f58dbbb2ed1df

  • SHA512

    4cf59c4aa3e09ddb6d218058f96e34396a37e02053c632f30a77956badaf1f604556841c8c7a800d02b93ad321726d7d8f839f4384de1cf774d327b2db197819

  • SSDEEP

    3072:muCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:azWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4bf82c025a19541983911e700725fc56435a822b1addbcc6aa8f58dbbb2ed1df

    • Size

      177KB

    • MD5

      d3c60139813e02976c1f82caa8f3e1d2

    • SHA1

      9551d9520df688abf085887b4b05bb1d3702b332

    • SHA256

      4bf82c025a19541983911e700725fc56435a822b1addbcc6aa8f58dbbb2ed1df

    • SHA512

      4cf59c4aa3e09ddb6d218058f96e34396a37e02053c632f30a77956badaf1f604556841c8c7a800d02b93ad321726d7d8f839f4384de1cf774d327b2db197819

    • SSDEEP

      3072:muCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:azWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks