General

  • Target

    JaffaCakes118_4c5075d51e6da350bef3faaaf90cfb80f16d2f5d0964f47ffc872bab2c565504

  • Size

    161KB

  • Sample

    241224-bhgvrsxngl

  • MD5

    e060e0366916991d9b1fbc8b33e0d743

  • SHA1

    36b5292f61bc40da1fae597f4dfdc09106fdb9df

  • SHA256

    4c5075d51e6da350bef3faaaf90cfb80f16d2f5d0964f47ffc872bab2c565504

  • SHA512

    d0b65077f38880ab104c138498460e5188e9ee723afa3dcb3f444c82daac995cd675b3621bc01166e502213359ac375cc84cbf36b7d37875b960194109634e56

  • SSDEEP

    3072:Mp45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:W4KcMhVkbK3hDq9E8i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4c5075d51e6da350bef3faaaf90cfb80f16d2f5d0964f47ffc872bab2c565504

    • Size

      161KB

    • MD5

      e060e0366916991d9b1fbc8b33e0d743

    • SHA1

      36b5292f61bc40da1fae597f4dfdc09106fdb9df

    • SHA256

      4c5075d51e6da350bef3faaaf90cfb80f16d2f5d0964f47ffc872bab2c565504

    • SHA512

      d0b65077f38880ab104c138498460e5188e9ee723afa3dcb3f444c82daac995cd675b3621bc01166e502213359ac375cc84cbf36b7d37875b960194109634e56

    • SSDEEP

      3072:Mp45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:W4KcMhVkbK3hDq9E8i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks