General

  • Target

    JaffaCakes118_b5d4d159a50723576fb79516991ae63ff27779e29f4fd044ed98b8efe1d45275

  • Size

    161KB

  • Sample

    241224-rch4msypfz

  • MD5

    d3cc1e757a36d1d101001e5f2d5e9428

  • SHA1

    e9715f5d04851d1118a28e25deb4466cb0771bb2

  • SHA256

    b5d4d159a50723576fb79516991ae63ff27779e29f4fd044ed98b8efe1d45275

  • SHA512

    44111b7857af2830c1f0914fe9dc7f5b56d678d1aedf14ab69d1811c237bd636cd3e19a8572f3fbe9c9a863cb97149cd4da6fc383edfd046a4ee0977d176b677

  • SSDEEP

    3072:eK4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:UDBdOlG0nyg1DvwxgZ/v

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b5d4d159a50723576fb79516991ae63ff27779e29f4fd044ed98b8efe1d45275

    • Size

      161KB

    • MD5

      d3cc1e757a36d1d101001e5f2d5e9428

    • SHA1

      e9715f5d04851d1118a28e25deb4466cb0771bb2

    • SHA256

      b5d4d159a50723576fb79516991ae63ff27779e29f4fd044ed98b8efe1d45275

    • SHA512

      44111b7857af2830c1f0914fe9dc7f5b56d678d1aedf14ab69d1811c237bd636cd3e19a8572f3fbe9c9a863cb97149cd4da6fc383edfd046a4ee0977d176b677

    • SSDEEP

      3072:eK4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:UDBdOlG0nyg1DvwxgZ/v

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks