General

  • Target

    JaffaCakes118_f905585597c34e281068416d297718a96ac918c6c2b72c98d88d4967ba9432ba

  • Size

    161KB

  • Sample

    241230-23lbsswka1

  • MD5

    7f29c74b634170613226be9383cfb142

  • SHA1

    e645f0758ef64ed87dd5e0c7d7e182dce54607d6

  • SHA256

    f905585597c34e281068416d297718a96ac918c6c2b72c98d88d4967ba9432ba

  • SHA512

    dbd46b9f51799ba2860c24a2268667af384e2beca3f978bb3acdecbd3c4cfe0a9aa7c6bdda4807be9c41446b6a056d10edafdd3de4a4e1cc9e6d004429f72393

  • SSDEEP

    3072:Yr45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:Y4KcMhVkbK3hDq9E8i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f905585597c34e281068416d297718a96ac918c6c2b72c98d88d4967ba9432ba

    • Size

      161KB

    • MD5

      7f29c74b634170613226be9383cfb142

    • SHA1

      e645f0758ef64ed87dd5e0c7d7e182dce54607d6

    • SHA256

      f905585597c34e281068416d297718a96ac918c6c2b72c98d88d4967ba9432ba

    • SHA512

      dbd46b9f51799ba2860c24a2268667af384e2beca3f978bb3acdecbd3c4cfe0a9aa7c6bdda4807be9c41446b6a056d10edafdd3de4a4e1cc9e6d004429f72393

    • SSDEEP

      3072:Yr45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:Y4KcMhVkbK3hDq9E8i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks