General

  • Target

    JaffaCakes118_e2df25fd3183b26148de23c281adbc10042c33281c79648d474a1160fe255685

  • Size

    161KB

  • Sample

    241223-1zybhstjam

  • MD5

    123fc8c3a195ff9d6504e1b7feca6e67

  • SHA1

    4a195b3475b9d1fc2596f5a1f66eeca931065cc4

  • SHA256

    e2df25fd3183b26148de23c281adbc10042c33281c79648d474a1160fe255685

  • SHA512

    b42c403cd3cf176aa993837b0cedf58cd4a49deb38c9324c4865a22f13f85023780e8b4dd6d9892bd42473f2f4a98259904624bb691a68ff95733a3f65269951

  • SSDEEP

    3072:Ti45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:O4KcMhVkbK3hDq9E8i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e2df25fd3183b26148de23c281adbc10042c33281c79648d474a1160fe255685

    • Size

      161KB

    • MD5

      123fc8c3a195ff9d6504e1b7feca6e67

    • SHA1

      4a195b3475b9d1fc2596f5a1f66eeca931065cc4

    • SHA256

      e2df25fd3183b26148de23c281adbc10042c33281c79648d474a1160fe255685

    • SHA512

      b42c403cd3cf176aa993837b0cedf58cd4a49deb38c9324c4865a22f13f85023780e8b4dd6d9892bd42473f2f4a98259904624bb691a68ff95733a3f65269951

    • SSDEEP

      3072:Ti45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:O4KcMhVkbK3hDq9E8i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks