General

  • Target

    JaffaCakes118_d45f14f319fb5af0454e5b3e84facdf9f1d355e580cfe0827bd6d09927a496e9

  • Size

    184KB

  • Sample

    241230-2gvy4svlcs

  • MD5

    09ef59ac8acca75d5b8eebb3559d2178

  • SHA1

    baed9cab0cc50e85fb78f40c5b7b8db660890c31

  • SHA256

    d45f14f319fb5af0454e5b3e84facdf9f1d355e580cfe0827bd6d09927a496e9

  • SHA512

    1b3c444a6cca736f5d8c75676af94ce16e567fc07a5ff291643a173a4476917b103298a3d63e9256c0227b5d5024ba8a381743e4f5b7c367a4c9c15e1c78b640

  • SSDEEP

    3072:mgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgsdA4l:XPFkq6zOe5ilSanObd

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d45f14f319fb5af0454e5b3e84facdf9f1d355e580cfe0827bd6d09927a496e9

    • Size

      184KB

    • MD5

      09ef59ac8acca75d5b8eebb3559d2178

    • SHA1

      baed9cab0cc50e85fb78f40c5b7b8db660890c31

    • SHA256

      d45f14f319fb5af0454e5b3e84facdf9f1d355e580cfe0827bd6d09927a496e9

    • SHA512

      1b3c444a6cca736f5d8c75676af94ce16e567fc07a5ff291643a173a4476917b103298a3d63e9256c0227b5d5024ba8a381743e4f5b7c367a4c9c15e1c78b640

    • SSDEEP

      3072:mgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgsdA4l:XPFkq6zOe5ilSanObd

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks