General

  • Target

    JaffaCakes118_f41de3940c5e85959b49fad63ec112adef12f79600614993358628c954f16969

  • Size

    184KB

  • Sample

    241225-t4cr2sypap

  • MD5

    da6e1f5e297ea39619637a7ff36a9555

  • SHA1

    8960ecefdf8802714d074699a12a8733226f9def

  • SHA256

    f41de3940c5e85959b49fad63ec112adef12f79600614993358628c954f16969

  • SHA512

    548b180fd995261886c188b4659325b30adb24b5cd34241cc4924c27ea092cba50b761aff650669e7eccd92fcb02f465698fc1d4be838acb26c66f54a1bf184a

  • SSDEEP

    3072:puwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Kjlmsb:j7TXYsd9SkONU1jKGlYlm

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f41de3940c5e85959b49fad63ec112adef12f79600614993358628c954f16969

    • Size

      184KB

    • MD5

      da6e1f5e297ea39619637a7ff36a9555

    • SHA1

      8960ecefdf8802714d074699a12a8733226f9def

    • SHA256

      f41de3940c5e85959b49fad63ec112adef12f79600614993358628c954f16969

    • SHA512

      548b180fd995261886c188b4659325b30adb24b5cd34241cc4924c27ea092cba50b761aff650669e7eccd92fcb02f465698fc1d4be838acb26c66f54a1bf184a

    • SSDEEP

      3072:puwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4Kjlmsb:j7TXYsd9SkONU1jKGlYlm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks