General

  • Target

    JaffaCakes118_869071a61328d433aa56fece053cdac2039af676ef4e1783b578ee403240ea63

  • Size

    177KB

  • Sample

    241223-1zgzjasrgp

  • MD5

    5bf088e70f98c2581bcb49b3e80fdc73

  • SHA1

    63760c7c233ae2b5b3598708e5367b6a6f1c1792

  • SHA256

    869071a61328d433aa56fece053cdac2039af676ef4e1783b578ee403240ea63

  • SHA512

    bc2987635520788bf5b2266ee38bb40500a6b843e42ff987768ed4bacf3f318e89979de14f85a3dee806c78a160ded08cf6213cf37b35b14cf8ed837c6826825

  • SSDEEP

    3072:+uCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:SzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_869071a61328d433aa56fece053cdac2039af676ef4e1783b578ee403240ea63

    • Size

      177KB

    • MD5

      5bf088e70f98c2581bcb49b3e80fdc73

    • SHA1

      63760c7c233ae2b5b3598708e5367b6a6f1c1792

    • SHA256

      869071a61328d433aa56fece053cdac2039af676ef4e1783b578ee403240ea63

    • SHA512

      bc2987635520788bf5b2266ee38bb40500a6b843e42ff987768ed4bacf3f318e89979de14f85a3dee806c78a160ded08cf6213cf37b35b14cf8ed837c6826825

    • SSDEEP

      3072:+uCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:SzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks