General

  • Target

    JaffaCakes118_dd5ac1c65007a3497c6a7408f5335f6c72f57e3428f557d5664ee0432d1fa054

  • Size

    177KB

  • Sample

    241230-e227layjcn

  • MD5

    3665ff96f2c472e53fe4033190856a6c

  • SHA1

    7af6af713dbbcd264b434261a2cf9db7ac369e66

  • SHA256

    dd5ac1c65007a3497c6a7408f5335f6c72f57e3428f557d5664ee0432d1fa054

  • SHA512

    75f1922a3d1e4ee4c4e9ad01fd470b8ee693789c517e6f4666282eff1f318762e820ae3da8ee8a4924f7e5290ab9a7d1688898b98cdd334288a8f5ed11bd12df

  • SSDEEP

    3072:suCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:gzWxkOP4p2EesvcDi6DOHPJ

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.76.1.150:443

50.249.212.98:23399

104.168.154.79:5007

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_dd5ac1c65007a3497c6a7408f5335f6c72f57e3428f557d5664ee0432d1fa054

    • Size

      177KB

    • MD5

      3665ff96f2c472e53fe4033190856a6c

    • SHA1

      7af6af713dbbcd264b434261a2cf9db7ac369e66

    • SHA256

      dd5ac1c65007a3497c6a7408f5335f6c72f57e3428f557d5664ee0432d1fa054

    • SHA512

      75f1922a3d1e4ee4c4e9ad01fd470b8ee693789c517e6f4666282eff1f318762e820ae3da8ee8a4924f7e5290ab9a7d1688898b98cdd334288a8f5ed11bd12df

    • SSDEEP

      3072:suCmyBVtWxZCOCA4Hpl1tv18FTETA8ocya/OyoSJPAacbnid8DOHPJ+HJ:gzWxkOP4p2EesvcDi6DOHPJ

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks