General

  • Target

    JaffaCakes118_4fc783aa15d731c400cb1d9096ab7122150d9ae156eafa5ce872adb556275d6f

  • Size

    161KB

  • Sample

    241223-3tbxfawjcr

  • MD5

    d27a77f87c6bd7727ec6db2225fba3e2

  • SHA1

    6d885e42f708df1ea2f52d000d962ff9565819d3

  • SHA256

    4fc783aa15d731c400cb1d9096ab7122150d9ae156eafa5ce872adb556275d6f

  • SHA512

    13a73f9d412bd25b9d1e89522b71b8e272cbe8ea9746627ffa1abd52d932433038cab383096055c2f4be59672102369fbf7117803d875d9dde47bfc1db0eeef4

  • SSDEEP

    3072:rR4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:GDBdOlG0nyg1DvwxgZ/v

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4fc783aa15d731c400cb1d9096ab7122150d9ae156eafa5ce872adb556275d6f

    • Size

      161KB

    • MD5

      d27a77f87c6bd7727ec6db2225fba3e2

    • SHA1

      6d885e42f708df1ea2f52d000d962ff9565819d3

    • SHA256

      4fc783aa15d731c400cb1d9096ab7122150d9ae156eafa5ce872adb556275d6f

    • SHA512

      13a73f9d412bd25b9d1e89522b71b8e272cbe8ea9746627ffa1abd52d932433038cab383096055c2f4be59672102369fbf7117803d875d9dde47bfc1db0eeef4

    • SSDEEP

      3072:rR4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:GDBdOlG0nyg1DvwxgZ/v

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks