General

  • Target

    JaffaCakes118_78c8fc675ac31561d87e51b5284057ecadb3dad319ca1e212b667b4f7bdbde28

  • Size

    177KB

  • Sample

    241223-29tazsvmbp

  • MD5

    23ff371720b8d3d8a0c4abfdcfa26eb7

  • SHA1

    d845c5b6a77335e5cfb4cfcf0e789e987d3488b1

  • SHA256

    78c8fc675ac31561d87e51b5284057ecadb3dad319ca1e212b667b4f7bdbde28

  • SHA512

    270794b5043aaf414b16db993642c9f94b582a8e594676b4e55e420b1fcb27e0538d2e2e5317da86d21e260e5f0ce38a9b9b28c54823eb5e9abdf791e688b800

  • SSDEEP

    3072:AoNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:zaIzLgKrjbvUAjERycp6c8qgATA2TQUr

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_78c8fc675ac31561d87e51b5284057ecadb3dad319ca1e212b667b4f7bdbde28

    • Size

      177KB

    • MD5

      23ff371720b8d3d8a0c4abfdcfa26eb7

    • SHA1

      d845c5b6a77335e5cfb4cfcf0e789e987d3488b1

    • SHA256

      78c8fc675ac31561d87e51b5284057ecadb3dad319ca1e212b667b4f7bdbde28

    • SHA512

      270794b5043aaf414b16db993642c9f94b582a8e594676b4e55e420b1fcb27e0538d2e2e5317da86d21e260e5f0ce38a9b9b28c54823eb5e9abdf791e688b800

    • SSDEEP

      3072:AoNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:zaIzLgKrjbvUAjERycp6c8qgATA2TQUr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks