General

  • Target

    JaffaCakes118_0c9c160a714a49036d7892ecc42a9a458257b01753240742150c2471ed5a3839

  • Size

    161KB

  • Sample

    241230-xt9ktaxjbs

  • MD5

    09daa6da4d796177c3ec744c5741624b

  • SHA1

    25a162d807ef891923365be1989129f464eeaa66

  • SHA256

    0c9c160a714a49036d7892ecc42a9a458257b01753240742150c2471ed5a3839

  • SHA512

    a37cd93375740b42b1b963a86a9d61f799bdb78fffe8ef008a48b9b68629306d9083dff442502e993995ea77cdfeeb137e197ea25675582ffc7b307cc334da34

  • SSDEEP

    3072:NL45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:t4KcMhVkbK3hDq9E8i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0c9c160a714a49036d7892ecc42a9a458257b01753240742150c2471ed5a3839

    • Size

      161KB

    • MD5

      09daa6da4d796177c3ec744c5741624b

    • SHA1

      25a162d807ef891923365be1989129f464eeaa66

    • SHA256

      0c9c160a714a49036d7892ecc42a9a458257b01753240742150c2471ed5a3839

    • SHA512

      a37cd93375740b42b1b963a86a9d61f799bdb78fffe8ef008a48b9b68629306d9083dff442502e993995ea77cdfeeb137e197ea25675582ffc7b307cc334da34

    • SSDEEP

      3072:NL45bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:t4KcMhVkbK3hDq9E8i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks