General

  • Target

    JaffaCakes118_e6e3c88e817bde6cf6ef82ea6f83d3bc12e5e636654484215705b738dd691335

  • Size

    162KB

  • Sample

    241230-ex384axrar

  • MD5

    69b72247a157f7da84829add64735798

  • SHA1

    0341a0a66f7ae0a5cb78f484325853a6905f661a

  • SHA256

    e6e3c88e817bde6cf6ef82ea6f83d3bc12e5e636654484215705b738dd691335

  • SHA512

    180d8cd233150cad9ce5cefe4c3361409b413f5e8b8903e27e1543f8988d21d91978b3758a11a4c51ecadcc1eea5c4086e0a05606e470bb400a8590069fcfb62

  • SSDEEP

    3072:Xesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLG5:b4+VZQpt5hyPsa1ekiEF5

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e6e3c88e817bde6cf6ef82ea6f83d3bc12e5e636654484215705b738dd691335

    • Size

      162KB

    • MD5

      69b72247a157f7da84829add64735798

    • SHA1

      0341a0a66f7ae0a5cb78f484325853a6905f661a

    • SHA256

      e6e3c88e817bde6cf6ef82ea6f83d3bc12e5e636654484215705b738dd691335

    • SHA512

      180d8cd233150cad9ce5cefe4c3361409b413f5e8b8903e27e1543f8988d21d91978b3758a11a4c51ecadcc1eea5c4086e0a05606e470bb400a8590069fcfb62

    • SSDEEP

      3072:Xesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLG5:b4+VZQpt5hyPsa1ekiEF5

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks