General

  • Target

    JaffaCakes118_147877b0d6bdc93d23a55a00e5c1ae583aa5b88640dee0999fd0087c6420f0ff

  • Size

    161KB

  • Sample

    241225-znmvzaxkdt

  • MD5

    2e22854a2ac7468189d149c9f531f735

  • SHA1

    09017b23be5b1999f472d732c95b4bb60ecc916b

  • SHA256

    147877b0d6bdc93d23a55a00e5c1ae583aa5b88640dee0999fd0087c6420f0ff

  • SHA512

    1cc29be9c7aae88ad81ded27adc9fb454c4ca50528f8fd67937590963786d10d2978fb9dc8e5f59cffe78e95dec13384fc3e8f3d1d6a6f89a515a4b6751ea634

  • SSDEEP

    3072:9c4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:pDBdOlG0nyg1DvwxgZ/v

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_147877b0d6bdc93d23a55a00e5c1ae583aa5b88640dee0999fd0087c6420f0ff

    • Size

      161KB

    • MD5

      2e22854a2ac7468189d149c9f531f735

    • SHA1

      09017b23be5b1999f472d732c95b4bb60ecc916b

    • SHA256

      147877b0d6bdc93d23a55a00e5c1ae583aa5b88640dee0999fd0087c6420f0ff

    • SHA512

      1cc29be9c7aae88ad81ded27adc9fb454c4ca50528f8fd67937590963786d10d2978fb9dc8e5f59cffe78e95dec13384fc3e8f3d1d6a6f89a515a4b6751ea634

    • SSDEEP

      3072:9c4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:pDBdOlG0nyg1DvwxgZ/v

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks