General

  • Target

    JaffaCakes118_b969144b40dceb993355692c296bde493de77efb36cad326188bbdc9d11a599e

  • Size

    177KB

  • Sample

    241224-a1zmvsxjaj

  • MD5

    ea4329688328f62e410e82bb30bab7d9

  • SHA1

    8a2292a95f4d93de4df7b1991ea2d6aaeaf5599d

  • SHA256

    b969144b40dceb993355692c296bde493de77efb36cad326188bbdc9d11a599e

  • SHA512

    6c3a57391c28473ee88a4ebf954bdca3d9f76c03f10fb61e1ea70be33541d66e658785559b662894b4d671c5b41280b481c84049a3c5dd7852a948680ef996f2

  • SSDEEP

    3072:LuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:vzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b969144b40dceb993355692c296bde493de77efb36cad326188bbdc9d11a599e

    • Size

      177KB

    • MD5

      ea4329688328f62e410e82bb30bab7d9

    • SHA1

      8a2292a95f4d93de4df7b1991ea2d6aaeaf5599d

    • SHA256

      b969144b40dceb993355692c296bde493de77efb36cad326188bbdc9d11a599e

    • SHA512

      6c3a57391c28473ee88a4ebf954bdca3d9f76c03f10fb61e1ea70be33541d66e658785559b662894b4d671c5b41280b481c84049a3c5dd7852a948680ef996f2

    • SSDEEP

      3072:LuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:vzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks