General

  • Target

    JaffaCakes118_c1382d97af840df2398d11258780fafd76c179da0f86660c37ad4098d40cac49

  • Size

    161KB

  • Sample

    241223-whqg5awphw

  • MD5

    5f240b5a004fb8507ca522e0a56c6770

  • SHA1

    fb1c1818167212aefd187920ad6cfe497b3d0198

  • SHA256

    c1382d97af840df2398d11258780fafd76c179da0f86660c37ad4098d40cac49

  • SHA512

    add57510e09c2d4526c32773e68b3e18aa31d767802e0b74ef29b24dc9223a79e0cfa068a65b9805b7eaaa275d13027b165e013620c84fb9d1496456d1d2df54

  • SSDEEP

    3072:OL45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:S4KcMhVkbK3hDq9E8i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c1382d97af840df2398d11258780fafd76c179da0f86660c37ad4098d40cac49

    • Size

      161KB

    • MD5

      5f240b5a004fb8507ca522e0a56c6770

    • SHA1

      fb1c1818167212aefd187920ad6cfe497b3d0198

    • SHA256

      c1382d97af840df2398d11258780fafd76c179da0f86660c37ad4098d40cac49

    • SHA512

      add57510e09c2d4526c32773e68b3e18aa31d767802e0b74ef29b24dc9223a79e0cfa068a65b9805b7eaaa275d13027b165e013620c84fb9d1496456d1d2df54

    • SSDEEP

      3072:OL45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:S4KcMhVkbK3hDq9E8i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks