General

  • Target

    JaffaCakes118_d77e402e5f928bac884689575639fff36bd6a34801c04d311d413ce18520cbc2

  • Size

    177KB

  • Sample

    241223-zgd99azrev

  • MD5

    7a0fc33b0dd4d47cb78459cc6a67dda0

  • SHA1

    da0702c4afa60845454f50ca5a5e12ea960538c6

  • SHA256

    d77e402e5f928bac884689575639fff36bd6a34801c04d311d413ce18520cbc2

  • SHA512

    68ed83bc43fe1075d672cef0adf50df472817b227207dff1ea5e0ad8ab116d0bc95cea9edbc9ab9885eb209e1516b78d8811b03b426139e81b22e1e53bfed08a

  • SSDEEP

    3072:moNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:JaIzLgKrjbvUAjERycp6c8qgATA2TQUr

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d77e402e5f928bac884689575639fff36bd6a34801c04d311d413ce18520cbc2

    • Size

      177KB

    • MD5

      7a0fc33b0dd4d47cb78459cc6a67dda0

    • SHA1

      da0702c4afa60845454f50ca5a5e12ea960538c6

    • SHA256

      d77e402e5f928bac884689575639fff36bd6a34801c04d311d413ce18520cbc2

    • SHA512

      68ed83bc43fe1075d672cef0adf50df472817b227207dff1ea5e0ad8ab116d0bc95cea9edbc9ab9885eb209e1516b78d8811b03b426139e81b22e1e53bfed08a

    • SSDEEP

      3072:moNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:JaIzLgKrjbvUAjERycp6c8qgATA2TQUr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks