General

  • Target

    JaffaCakes118_ddd7123377c6df74cceb73df2d89031f64cf6eb49b57b7170e37fd1eec7e0eea

  • Size

    177KB

  • Sample

    241230-zkzela1jhw

  • MD5

    e0826bbc1789f22b3d866675195ae68d

  • SHA1

    bb5c9a4395af331b011b88044d41103ffb996d9c

  • SHA256

    ddd7123377c6df74cceb73df2d89031f64cf6eb49b57b7170e37fd1eec7e0eea

  • SHA512

    ce2f2e518de19ce68f8884132ed718681b68d71914a83a72f140ecb54e0720dbc5d8c7e73190b97e8fb916bdb8848331d9d7c9fc4d35d55f51aad826402b1229

  • SSDEEP

    3072:poNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SlrKI6bl/g:6aIzLgKrjbvUAjERycp6c8qgATA2TQUa

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ddd7123377c6df74cceb73df2d89031f64cf6eb49b57b7170e37fd1eec7e0eea

    • Size

      177KB

    • MD5

      e0826bbc1789f22b3d866675195ae68d

    • SHA1

      bb5c9a4395af331b011b88044d41103ffb996d9c

    • SHA256

      ddd7123377c6df74cceb73df2d89031f64cf6eb49b57b7170e37fd1eec7e0eea

    • SHA512

      ce2f2e518de19ce68f8884132ed718681b68d71914a83a72f140ecb54e0720dbc5d8c7e73190b97e8fb916bdb8848331d9d7c9fc4d35d55f51aad826402b1229

    • SSDEEP

      3072:poNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SlrKI6bl/g:6aIzLgKrjbvUAjERycp6c8qgATA2TQUa

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks