General

  • Target

    JaffaCakes118_d955257979522a65a22bbe17482be1289a6cd95a22f4293bb3695d0adf936ba1

  • Size

    177KB

  • Sample

    241223-v148kawlbv

  • MD5

    9ccad1f54578649c0b1ddd1b995f1387

  • SHA1

    8b22e2b9464b31a43051d83184fdca172843d47b

  • SHA256

    d955257979522a65a22bbe17482be1289a6cd95a22f4293bb3695d0adf936ba1

  • SHA512

    a22d6d2525b49705394dd675de7a1a85367aba953a9afcb067a23a4b169edc302d4891eb2e0a48fcdc26664d2b2f0f5d7f8d2c501e3a82aebbe925f85f3205e6

  • SSDEEP

    3072:+uCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:SzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d955257979522a65a22bbe17482be1289a6cd95a22f4293bb3695d0adf936ba1

    • Size

      177KB

    • MD5

      9ccad1f54578649c0b1ddd1b995f1387

    • SHA1

      8b22e2b9464b31a43051d83184fdca172843d47b

    • SHA256

      d955257979522a65a22bbe17482be1289a6cd95a22f4293bb3695d0adf936ba1

    • SHA512

      a22d6d2525b49705394dd675de7a1a85367aba953a9afcb067a23a4b169edc302d4891eb2e0a48fcdc26664d2b2f0f5d7f8d2c501e3a82aebbe925f85f3205e6

    • SSDEEP

      3072:+uCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:SzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks