General

  • Target

    JaffaCakes118_471f8adcc44f074cf3951dc6bde70d284a361279fec095e9fd5a00079ef094e4

  • Size

    162KB

  • Sample

    241228-3fpalsvqfl

  • MD5

    4386982489898fe10ed23b011e283f3f

  • SHA1

    ecf951a46a4184f960e0f95fd2fda6a5c41b3b68

  • SHA256

    471f8adcc44f074cf3951dc6bde70d284a361279fec095e9fd5a00079ef094e4

  • SHA512

    86ba833ec362d3a969bcbd0b28df89a67f52b93551c4a65b7646bf63c94c3daefb0c82c855ec55f672df09ef519d69159a67a919a8b69650104fc4e4af76bb47

  • SSDEEP

    3072:oesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicL7e:i4+VZQpt5hyPsa1ekiEse

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_471f8adcc44f074cf3951dc6bde70d284a361279fec095e9fd5a00079ef094e4

    • Size

      162KB

    • MD5

      4386982489898fe10ed23b011e283f3f

    • SHA1

      ecf951a46a4184f960e0f95fd2fda6a5c41b3b68

    • SHA256

      471f8adcc44f074cf3951dc6bde70d284a361279fec095e9fd5a00079ef094e4

    • SHA512

      86ba833ec362d3a969bcbd0b28df89a67f52b93551c4a65b7646bf63c94c3daefb0c82c855ec55f672df09ef519d69159a67a919a8b69650104fc4e4af76bb47

    • SSDEEP

      3072:oesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicL7e:i4+VZQpt5hyPsa1ekiEse

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks