General

  • Target

    JaffaCakes118_c38be470e08ab33b6b42899ca2e492baadabedc8dc04197438a4221fb9a9cf99

  • Size

    177KB

  • Sample

    241230-2dywlavkbw

  • MD5

    36f85e183a9c58aec01ecb4431a0fcb1

  • SHA1

    071598b3dd8f4ede23f4578b2263af9b5828d367

  • SHA256

    c38be470e08ab33b6b42899ca2e492baadabedc8dc04197438a4221fb9a9cf99

  • SHA512

    bfd51d855ef979c9bc2ba85ffcd727cd7a002fe080ce78804ed3be2bed77244c17ce238b04ca14456ac72d1d8ed71b8f7b311b68e11716a983b82ca5ca85bc22

  • SSDEEP

    3072:8oNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SlrKI6bl/g:XaIzLgKrjbvUAjERycp6c8qgATA2TQUK

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c38be470e08ab33b6b42899ca2e492baadabedc8dc04197438a4221fb9a9cf99

    • Size

      177KB

    • MD5

      36f85e183a9c58aec01ecb4431a0fcb1

    • SHA1

      071598b3dd8f4ede23f4578b2263af9b5828d367

    • SHA256

      c38be470e08ab33b6b42899ca2e492baadabedc8dc04197438a4221fb9a9cf99

    • SHA512

      bfd51d855ef979c9bc2ba85ffcd727cd7a002fe080ce78804ed3be2bed77244c17ce238b04ca14456ac72d1d8ed71b8f7b311b68e11716a983b82ca5ca85bc22

    • SSDEEP

      3072:8oNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SlrKI6bl/g:XaIzLgKrjbvUAjERycp6c8qgATA2TQUK

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks