General

  • Target

    JaffaCakes118_484361ec9078d2a8a370303481b3fe3aeaec54e59d9af79f1a0b56b8b9f93e91

  • Size

    162KB

  • Sample

    241224-parxnaxlfq

  • MD5

    4bf29aced536134b3179ceab43c155b9

  • SHA1

    452160d89b1936afd70e19fd31c17fbe176b4d69

  • SHA256

    484361ec9078d2a8a370303481b3fe3aeaec54e59d9af79f1a0b56b8b9f93e91

  • SHA512

    444ce4ab567b43b31926c10aaf57cfe1f45159360a03eb6e08378ae74d4a273789d0ec8916ab65a3cda11bbaf62bc1ac763548002f018380d426d1c5699a6794

  • SSDEEP

    3072:8esl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:m4+VZQpt5hyPsa1ekiEyL

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_484361ec9078d2a8a370303481b3fe3aeaec54e59d9af79f1a0b56b8b9f93e91

    • Size

      162KB

    • MD5

      4bf29aced536134b3179ceab43c155b9

    • SHA1

      452160d89b1936afd70e19fd31c17fbe176b4d69

    • SHA256

      484361ec9078d2a8a370303481b3fe3aeaec54e59d9af79f1a0b56b8b9f93e91

    • SHA512

      444ce4ab567b43b31926c10aaf57cfe1f45159360a03eb6e08378ae74d4a273789d0ec8916ab65a3cda11bbaf62bc1ac763548002f018380d426d1c5699a6794

    • SSDEEP

      3072:8esl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:m4+VZQpt5hyPsa1ekiEyL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks