General

  • Target

    JaffaCakes118_2eae0f88abb4d737d8b4b2a8839668775ea64546ca32c1582db81415f1303433

  • Size

    177KB

  • Sample

    241224-ldy9cstnct

  • MD5

    e15fb28f6a3e599b5ca8ed70264a055e

  • SHA1

    9ac5dbd9ba65e9de5914345b485ca2a5fd7363cf

  • SHA256

    2eae0f88abb4d737d8b4b2a8839668775ea64546ca32c1582db81415f1303433

  • SHA512

    92962dcea608fc6c15e465a588d45dc74b914ce9e305b09ea15d252e940a57d420b0cae56f54797edae378725b223fd0aa6192bc685b0207a7d3554ee02e30e4

  • SSDEEP

    3072:BuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:tzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_2eae0f88abb4d737d8b4b2a8839668775ea64546ca32c1582db81415f1303433

    • Size

      177KB

    • MD5

      e15fb28f6a3e599b5ca8ed70264a055e

    • SHA1

      9ac5dbd9ba65e9de5914345b485ca2a5fd7363cf

    • SHA256

      2eae0f88abb4d737d8b4b2a8839668775ea64546ca32c1582db81415f1303433

    • SHA512

      92962dcea608fc6c15e465a588d45dc74b914ce9e305b09ea15d252e940a57d420b0cae56f54797edae378725b223fd0aa6192bc685b0207a7d3554ee02e30e4

    • SSDEEP

      3072:BuCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:tzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks