General

  • Target

    JaffaCakes118_8c048958b93b56335f9ee620fa6179d2382ba0f5ef0ba872031eb4350c699c6b

  • Size

    161KB

  • Sample

    241229-nemcaszpek

  • MD5

    7e08089df6984ad1f92d995249d78865

  • SHA1

    6611d39a06755325a4655884703804774b21bffa

  • SHA256

    8c048958b93b56335f9ee620fa6179d2382ba0f5ef0ba872031eb4350c699c6b

  • SHA512

    4d36768e126d88ca6f2d37744d6b1f374dfd29828a791c98324ffd548ec91ee2549393fcfc8734e3e0f678bee4b0cb307298e226f626c1efcc075295fbb605df

  • SSDEEP

    3072:cc4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:kDBdOlG0nyg1DvwxgZ/v

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8c048958b93b56335f9ee620fa6179d2382ba0f5ef0ba872031eb4350c699c6b

    • Size

      161KB

    • MD5

      7e08089df6984ad1f92d995249d78865

    • SHA1

      6611d39a06755325a4655884703804774b21bffa

    • SHA256

      8c048958b93b56335f9ee620fa6179d2382ba0f5ef0ba872031eb4350c699c6b

    • SHA512

      4d36768e126d88ca6f2d37744d6b1f374dfd29828a791c98324ffd548ec91ee2549393fcfc8734e3e0f678bee4b0cb307298e226f626c1efcc075295fbb605df

    • SSDEEP

      3072:cc4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:kDBdOlG0nyg1DvwxgZ/v

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks