General

  • Target

    JaffaCakes118_91f9e0dffc545dcc3008e15c0efaaabc98e53dcc1d9c6d2d6fa5a15aa3c417cf

  • Size

    162KB

  • Sample

    241223-wz5y5sxkbz

  • MD5

    5d1717e80a1be6206cb8f4b4ad4b9dc8

  • SHA1

    95f24fe11c9aeddc60fbf837b93d2a85b73da874

  • SHA256

    91f9e0dffc545dcc3008e15c0efaaabc98e53dcc1d9c6d2d6fa5a15aa3c417cf

  • SHA512

    bad9f2b7b705fd85cf79f86610dc267893a00985201a0b779fd236decb91c50fdd4109c3fd133947486c9a638c5e7b370e8c23f485ef0b621ad004fc4dfc5451

  • SSDEEP

    3072:5/FbrEzD9N+RiMB00c9/74DXE+JgaV7IPx+e6O/pPtaLOi:zbrE1kvcB74DXZ2Mel3i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_91f9e0dffc545dcc3008e15c0efaaabc98e53dcc1d9c6d2d6fa5a15aa3c417cf

    • Size

      162KB

    • MD5

      5d1717e80a1be6206cb8f4b4ad4b9dc8

    • SHA1

      95f24fe11c9aeddc60fbf837b93d2a85b73da874

    • SHA256

      91f9e0dffc545dcc3008e15c0efaaabc98e53dcc1d9c6d2d6fa5a15aa3c417cf

    • SHA512

      bad9f2b7b705fd85cf79f86610dc267893a00985201a0b779fd236decb91c50fdd4109c3fd133947486c9a638c5e7b370e8c23f485ef0b621ad004fc4dfc5451

    • SSDEEP

      3072:5/FbrEzD9N+RiMB00c9/74DXE+JgaV7IPx+e6O/pPtaLOi:zbrE1kvcB74DXZ2Mel3i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks