General

  • Target

    JaffaCakes118_84c82a9266f22998af51a23b124eb72182fdae85491ac5656067dc782be6ef31

  • Size

    173KB

  • Sample

    241223-zpe7hs1kgv

  • MD5

    7988386326b607d26e7fa08d1c2f12e4

  • SHA1

    5ba1b05cfe2b53b8538626f67b7c667daa9a9765

  • SHA256

    84c82a9266f22998af51a23b124eb72182fdae85491ac5656067dc782be6ef31

  • SHA512

    288571b33a0b398c39551d85445f923807aa2d0a869fd6aecba82787d9dec1a2afed4ffa10d1309a5ccaf8357d6667a1016946f8f5ed1a8371fb280e57833007

  • SSDEEP

    3072:OAqZ5wNFg3ok/8G4gtz31zVqfD//eoc5WLjopfsW8BhI283o4qQEf03lN2szzjL:OATNC4k/p4gtFVSDCwLjoxsW0hf83pqb

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

94.23.86.141:13783

62.75.161.205:2303

162.214.188.105:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_84c82a9266f22998af51a23b124eb72182fdae85491ac5656067dc782be6ef31

    • Size

      173KB

    • MD5

      7988386326b607d26e7fa08d1c2f12e4

    • SHA1

      5ba1b05cfe2b53b8538626f67b7c667daa9a9765

    • SHA256

      84c82a9266f22998af51a23b124eb72182fdae85491ac5656067dc782be6ef31

    • SHA512

      288571b33a0b398c39551d85445f923807aa2d0a869fd6aecba82787d9dec1a2afed4ffa10d1309a5ccaf8357d6667a1016946f8f5ed1a8371fb280e57833007

    • SSDEEP

      3072:OAqZ5wNFg3ok/8G4gtz31zVqfD//eoc5WLjopfsW8BhI283o4qQEf03lN2szzjL:OATNC4k/p4gtFVSDCwLjoxsW0hf83pqb

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks