General

  • Target

    JaffaCakes118_4c034fea3435cd65e5f4de3766d717d8551455e8f037d1a9f8e019204dd2b492

  • Size

    184KB

  • Sample

    241223-zy55as1nct

  • MD5

    1c23939037ef7f86408acc15cc4f2f18

  • SHA1

    272ee4c70a23bf50c1755ad68cf80a0399898d15

  • SHA256

    4c034fea3435cd65e5f4de3766d717d8551455e8f037d1a9f8e019204dd2b492

  • SHA512

    aa6f9622ff52e122d5d6f040613d599a63e9f14f655ffcd4a02e831225b966a4b1543ba48f7f8a13a1ae01122e8a24627b1dba91bb1e2fdfb2b38286c385e8d4

  • SSDEEP

    3072:TgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgsdA4l:mPFkq6zOe5ilSanOHd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4c034fea3435cd65e5f4de3766d717d8551455e8f037d1a9f8e019204dd2b492

    • Size

      184KB

    • MD5

      1c23939037ef7f86408acc15cc4f2f18

    • SHA1

      272ee4c70a23bf50c1755ad68cf80a0399898d15

    • SHA256

      4c034fea3435cd65e5f4de3766d717d8551455e8f037d1a9f8e019204dd2b492

    • SHA512

      aa6f9622ff52e122d5d6f040613d599a63e9f14f655ffcd4a02e831225b966a4b1543ba48f7f8a13a1ae01122e8a24627b1dba91bb1e2fdfb2b38286c385e8d4

    • SSDEEP

      3072:TgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgsdA4l:mPFkq6zOe5ilSanOHd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks