General

  • Target

    JaffaCakes118_8e9789c0efcbca0420676ce731ac40a263c34b0f8429d9005507fb0c68b575ac

  • Size

    161KB

  • Sample

    241229-2rsazazjbp

  • MD5

    de9a90b6050ec9928008bc6fa7193933

  • SHA1

    4eba7da7288e2ede732adf541d43218f384bb29e

  • SHA256

    8e9789c0efcbca0420676ce731ac40a263c34b0f8429d9005507fb0c68b575ac

  • SHA512

    6133d25d233ff37998bc1abc8d6b875342bbbccb5e1ca05ed04dee2149733d61221b88d82db3c464f4e7f88054f3433b851a3f221e0c471d654502d5faeb2e58

  • SSDEEP

    3072:Jd4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:IDBdOlG0nyg1DvwxgZ/v

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8e9789c0efcbca0420676ce731ac40a263c34b0f8429d9005507fb0c68b575ac

    • Size

      161KB

    • MD5

      de9a90b6050ec9928008bc6fa7193933

    • SHA1

      4eba7da7288e2ede732adf541d43218f384bb29e

    • SHA256

      8e9789c0efcbca0420676ce731ac40a263c34b0f8429d9005507fb0c68b575ac

    • SHA512

      6133d25d233ff37998bc1abc8d6b875342bbbccb5e1ca05ed04dee2149733d61221b88d82db3c464f4e7f88054f3433b851a3f221e0c471d654502d5faeb2e58

    • SSDEEP

      3072:Jd4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:IDBdOlG0nyg1DvwxgZ/v

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks