General

  • Target

    JaffaCakes118_aeb84edf0725c30d5be760ec1af163542b1c549433c89203610b6735f6246c54

  • Size

    162KB

  • Sample

    241229-czgf1azlat

  • MD5

    be499673078cbec0aec2ceb4693c3224

  • SHA1

    e8e83cc7da81abd3286bc3ebf74e1a3919be4280

  • SHA256

    aeb84edf0725c30d5be760ec1af163542b1c549433c89203610b6735f6246c54

  • SHA512

    6dcd27ca71dee5ce4229bb7517f83742bad80c78d7161abb4c2da5e820b3d0c517501cffcd5148aba1c92fe712f2f03488d9f8441dff44cf9a486fb8a4f43147

  • SSDEEP

    3072:Besl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLHB:94+VZQpt5hyPsa1ekiEIB

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_aeb84edf0725c30d5be760ec1af163542b1c549433c89203610b6735f6246c54

    • Size

      162KB

    • MD5

      be499673078cbec0aec2ceb4693c3224

    • SHA1

      e8e83cc7da81abd3286bc3ebf74e1a3919be4280

    • SHA256

      aeb84edf0725c30d5be760ec1af163542b1c549433c89203610b6735f6246c54

    • SHA512

      6dcd27ca71dee5ce4229bb7517f83742bad80c78d7161abb4c2da5e820b3d0c517501cffcd5148aba1c92fe712f2f03488d9f8441dff44cf9a486fb8a4f43147

    • SSDEEP

      3072:Besl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLHB:94+VZQpt5hyPsa1ekiEIB

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks