General

  • Target

    JaffaCakes118_72928405a4bf4e0b968de00e31f859d8b9e7f4b84aaf2d0a71ed723ba555981e

  • Size

    184KB

  • Sample

    241224-c4sptszmfm

  • MD5

    18ce9292bd17be7909b0654a2b9c9a1d

  • SHA1

    fd8e88913fddc4e150d0ac609af0e238f8116202

  • SHA256

    72928405a4bf4e0b968de00e31f859d8b9e7f4b84aaf2d0a71ed723ba555981e

  • SHA512

    23dddd4254222ff6e9eb8bfb9493966192275f1a32082707e5068aae382f99cafb6558d91453b396b4706c7b7e7bccaa84ccbebcb97b707bc4ccc5ceb1566578

  • SSDEEP

    3072:fdMzjc3hsj4S/T54/jA03FNzy/SET+88lGBZ51FyIqFue:fdhscmTclN6yI

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_72928405a4bf4e0b968de00e31f859d8b9e7f4b84aaf2d0a71ed723ba555981e

    • Size

      184KB

    • MD5

      18ce9292bd17be7909b0654a2b9c9a1d

    • SHA1

      fd8e88913fddc4e150d0ac609af0e238f8116202

    • SHA256

      72928405a4bf4e0b968de00e31f859d8b9e7f4b84aaf2d0a71ed723ba555981e

    • SHA512

      23dddd4254222ff6e9eb8bfb9493966192275f1a32082707e5068aae382f99cafb6558d91453b396b4706c7b7e7bccaa84ccbebcb97b707bc4ccc5ceb1566578

    • SSDEEP

      3072:fdMzjc3hsj4S/T54/jA03FNzy/SET+88lGBZ51FyIqFue:fdhscmTclN6yI

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks