General

  • Target

    JaffaCakes118_4fa538b0494b5976ca6bf8470a882e248e37fc031df529fcff6b9a0dd952ed14

  • Size

    161KB

  • Sample

    241229-qlhnsssmdw

  • MD5

    e8987e19b008464fbf0ff44f5797a2dd

  • SHA1

    7a0ca48e7b5320490ccedd3041dd1c0ff657d5b9

  • SHA256

    4fa538b0494b5976ca6bf8470a882e248e37fc031df529fcff6b9a0dd952ed14

  • SHA512

    d657b805d3213d4f0c21735b40da9097107eef54b0ef2bfbd5a8b182ad03ea929352cc122debc32f316a2ff51e937df0e88ff0427574fe356aed3e705bf41f13

  • SSDEEP

    3072:J84Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:NDBdOlG0nyg1DvwxgZ/v

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4fa538b0494b5976ca6bf8470a882e248e37fc031df529fcff6b9a0dd952ed14

    • Size

      161KB

    • MD5

      e8987e19b008464fbf0ff44f5797a2dd

    • SHA1

      7a0ca48e7b5320490ccedd3041dd1c0ff657d5b9

    • SHA256

      4fa538b0494b5976ca6bf8470a882e248e37fc031df529fcff6b9a0dd952ed14

    • SHA512

      d657b805d3213d4f0c21735b40da9097107eef54b0ef2bfbd5a8b182ad03ea929352cc122debc32f316a2ff51e937df0e88ff0427574fe356aed3e705bf41f13

    • SSDEEP

      3072:J84Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:NDBdOlG0nyg1DvwxgZ/v

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks