General

  • Target

    JaffaCakes118_77ea53a4b730f9d300981ca932711f58418033da72bed86be57edb9f71c3ab02

  • Size

    177KB

  • Sample

    241230-3gtayswqex

  • MD5

    ade4228be4803fc6e6462b0332bcf37e

  • SHA1

    0d7a40d412bd568ed4c7da67ff23c315980619ea

  • SHA256

    77ea53a4b730f9d300981ca932711f58418033da72bed86be57edb9f71c3ab02

  • SHA512

    b7185d216f76230b109cdf45f09ad578327539c6e5602bcde2f717f96cb2c0135cacbe581f3e65aa7ef65a8e9656b5d897a2cd1eeac4d59a6f9f4f4ae3017c25

  • SSDEEP

    3072:9oNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:2aIzLgKrjbvUAjERycp6c8qgATA2TQUr

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_77ea53a4b730f9d300981ca932711f58418033da72bed86be57edb9f71c3ab02

    • Size

      177KB

    • MD5

      ade4228be4803fc6e6462b0332bcf37e

    • SHA1

      0d7a40d412bd568ed4c7da67ff23c315980619ea

    • SHA256

      77ea53a4b730f9d300981ca932711f58418033da72bed86be57edb9f71c3ab02

    • SHA512

      b7185d216f76230b109cdf45f09ad578327539c6e5602bcde2f717f96cb2c0135cacbe581f3e65aa7ef65a8e9656b5d897a2cd1eeac4d59a6f9f4f4ae3017c25

    • SSDEEP

      3072:9oNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SurKI6bl/g:2aIzLgKrjbvUAjERycp6c8qgATA2TQUr

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks