General

  • Target

    JaffaCakes118_7d939055b67a21d85029f0f6f2837b99069f81bcd17007a96b1d2bd1dc041f89

  • Size

    162KB

  • Sample

    241229-j1a4yaxkcp

  • MD5

    5b74f7562eeec1b6490ebb10646355cd

  • SHA1

    648c8a6764501c6fa088d75d17618b57501893f1

  • SHA256

    7d939055b67a21d85029f0f6f2837b99069f81bcd17007a96b1d2bd1dc041f89

  • SHA512

    1af09ec125b88c2530749c6d66ed0851b66a85a541acd9f69af05078b58bb177e1be78606ecee58e7834d13fc89d33ee32b3b093ee8f74d9f6aaea0092f77717

  • SSDEEP

    3072:jesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:X4+VZQpt5hyPsa1ekiEyL

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7d939055b67a21d85029f0f6f2837b99069f81bcd17007a96b1d2bd1dc041f89

    • Size

      162KB

    • MD5

      5b74f7562eeec1b6490ebb10646355cd

    • SHA1

      648c8a6764501c6fa088d75d17618b57501893f1

    • SHA256

      7d939055b67a21d85029f0f6f2837b99069f81bcd17007a96b1d2bd1dc041f89

    • SHA512

      1af09ec125b88c2530749c6d66ed0851b66a85a541acd9f69af05078b58bb177e1be78606ecee58e7834d13fc89d33ee32b3b093ee8f74d9f6aaea0092f77717

    • SSDEEP

      3072:jesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:X4+VZQpt5hyPsa1ekiEyL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks