General

  • Target

    JaffaCakes118_61511b1a2429b16c7f331199117792e0a91af947ea5b252282a174a4c76f8e0a

  • Size

    161KB

  • Sample

    241224-mbqd4svmgl

  • MD5

    eb5e6d08be5488ed4535ea4b2de7d873

  • SHA1

    deacdea5b87be2e21054734506c8acc163ff95ab

  • SHA256

    61511b1a2429b16c7f331199117792e0a91af947ea5b252282a174a4c76f8e0a

  • SHA512

    e0727792947cb72a22713d15a8ad18f4cd83360489af2ed444baf739b9351de16b27b5ae3b36d2bc06d0cc66438f58bee51179d1180d0bc62373aaa9fc6b792b

  • SSDEEP

    3072:h545bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:b4KcMhVkbK3hDq9E8i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_61511b1a2429b16c7f331199117792e0a91af947ea5b252282a174a4c76f8e0a

    • Size

      161KB

    • MD5

      eb5e6d08be5488ed4535ea4b2de7d873

    • SHA1

      deacdea5b87be2e21054734506c8acc163ff95ab

    • SHA256

      61511b1a2429b16c7f331199117792e0a91af947ea5b252282a174a4c76f8e0a

    • SHA512

      e0727792947cb72a22713d15a8ad18f4cd83360489af2ed444baf739b9351de16b27b5ae3b36d2bc06d0cc66438f58bee51179d1180d0bc62373aaa9fc6b792b

    • SSDEEP

      3072:h545bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:b4KcMhVkbK3hDq9E8i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks