General

  • Target

    JaffaCakes118_7c933729a586400c10154561c99a31f21116f70e5fb2d25c8ec085ada132d74f

  • Size

    177KB

  • Sample

    241224-cagepsykft

  • MD5

    158da47cd185b6b4d97eff17033e0f24

  • SHA1

    f1703fa749757c55b0a28d85a427f1a948bf04de

  • SHA256

    7c933729a586400c10154561c99a31f21116f70e5fb2d25c8ec085ada132d74f

  • SHA512

    c9403e463d550569bc08d9cb0eb3cb212df9c083bebfd03db9eee187db88e28cabae3587cf1059ac84077924bba908a7ca44139d8e58c547422618082e5f5259

  • SSDEEP

    3072:6oNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:1aIzLgKrjbvUAjERycp6c8qgATA2TQUr

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7c933729a586400c10154561c99a31f21116f70e5fb2d25c8ec085ada132d74f

    • Size

      177KB

    • MD5

      158da47cd185b6b4d97eff17033e0f24

    • SHA1

      f1703fa749757c55b0a28d85a427f1a948bf04de

    • SHA256

      7c933729a586400c10154561c99a31f21116f70e5fb2d25c8ec085ada132d74f

    • SHA512

      c9403e463d550569bc08d9cb0eb3cb212df9c083bebfd03db9eee187db88e28cabae3587cf1059ac84077924bba908a7ca44139d8e58c547422618082e5f5259

    • SSDEEP

      3072:6oNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:1aIzLgKrjbvUAjERycp6c8qgATA2TQUr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks