General

  • Target

    JaffaCakes118_85f5d013afd7c21aad7a5c981e666491b351196dd44dcf9a65cec44a2eb487f6

  • Size

    178KB

  • Sample

    241223-zmvjes1lbl

  • MD5

    824473025b05938bf82f2f4b7a574802

  • SHA1

    fbae066406e9973f7348ef01f237b5a95d39d322

  • SHA256

    85f5d013afd7c21aad7a5c981e666491b351196dd44dcf9a65cec44a2eb487f6

  • SHA512

    0d58f8e287b2f3311d16a1b11bf973558b1b8d49f1ae5faffd801a941abb2a531a71e52c08404e6521ceda5c540af2e89aeca2867dcdc419f98be5363737ba9b

  • SSDEEP

    3072:XZUVAk9rsXo3/Ifz/uUXF2mSPBxv1tM7lt8jPU6/pyagsuAtuUucGZ2:XUAk9I4vgz/V2dulz6/hvHhG

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

142.93.223.149:443

128.199.36.62:4664

50.116.54.215:13786

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_85f5d013afd7c21aad7a5c981e666491b351196dd44dcf9a65cec44a2eb487f6

    • Size

      178KB

    • MD5

      824473025b05938bf82f2f4b7a574802

    • SHA1

      fbae066406e9973f7348ef01f237b5a95d39d322

    • SHA256

      85f5d013afd7c21aad7a5c981e666491b351196dd44dcf9a65cec44a2eb487f6

    • SHA512

      0d58f8e287b2f3311d16a1b11bf973558b1b8d49f1ae5faffd801a941abb2a531a71e52c08404e6521ceda5c540af2e89aeca2867dcdc419f98be5363737ba9b

    • SSDEEP

      3072:XZUVAk9rsXo3/Ifz/uUXF2mSPBxv1tM7lt8jPU6/pyagsuAtuUucGZ2:XUAk9I4vgz/V2dulz6/hvHhG

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks