General

  • Target

    JaffaCakes118_e7226f389f00bfaad4950f8a36adefa4172b080b8219797499a43c70f345fb9e

  • Size

    177KB

  • Sample

    241230-3frezatnam

  • MD5

    34d4a531b870950216b3e4866f354c8b

  • SHA1

    b4885856d13f5e95b794c28ab2fe112ded8b08d9

  • SHA256

    e7226f389f00bfaad4950f8a36adefa4172b080b8219797499a43c70f345fb9e

  • SHA512

    beb3a9d96ae29233fb73b8e8d62d94890336085c9d27171cf35cd2a5f3d64592b22aec73c0e93c64d740545994dd85c126ed59e2b4f4cc9e290a44fbead376ff

  • SSDEEP

    3072:DoNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:MaIzLgKrjbvUAjERycp6c8qgATA2TQUr

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e7226f389f00bfaad4950f8a36adefa4172b080b8219797499a43c70f345fb9e

    • Size

      177KB

    • MD5

      34d4a531b870950216b3e4866f354c8b

    • SHA1

      b4885856d13f5e95b794c28ab2fe112ded8b08d9

    • SHA256

      e7226f389f00bfaad4950f8a36adefa4172b080b8219797499a43c70f345fb9e

    • SHA512

      beb3a9d96ae29233fb73b8e8d62d94890336085c9d27171cf35cd2a5f3d64592b22aec73c0e93c64d740545994dd85c126ed59e2b4f4cc9e290a44fbead376ff

    • SSDEEP

      3072:DoNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:MaIzLgKrjbvUAjERycp6c8qgATA2TQUr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks