General

  • Target

    JaffaCakes118_5d597de986107994d1560a79fc81d103f96616ab966cc461b820df603c6474a8

  • Size

    184KB

  • Sample

    241230-zs574sylar

  • MD5

    621d5fe4381f5c82a75114db6c9f5036

  • SHA1

    574489c29eebf162923814e4fb38bb4dbabc6536

  • SHA256

    5d597de986107994d1560a79fc81d103f96616ab966cc461b820df603c6474a8

  • SHA512

    55d94a41aeb3a10e61495987b553fb0f024944c2d340f7aff6d9a4e9d57b4f3fbd9544429227de4cd545df9661e2f6b23c0781c5e599308fde83ba3fdf368c05

  • SSDEEP

    3072:XgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgddA4l:SPFkq6zOe5ilSanOad

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5d597de986107994d1560a79fc81d103f96616ab966cc461b820df603c6474a8

    • Size

      184KB

    • MD5

      621d5fe4381f5c82a75114db6c9f5036

    • SHA1

      574489c29eebf162923814e4fb38bb4dbabc6536

    • SHA256

      5d597de986107994d1560a79fc81d103f96616ab966cc461b820df603c6474a8

    • SHA512

      55d94a41aeb3a10e61495987b553fb0f024944c2d340f7aff6d9a4e9d57b4f3fbd9544429227de4cd545df9661e2f6b23c0781c5e599308fde83ba3fdf368c05

    • SSDEEP

      3072:XgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgddA4l:SPFkq6zOe5ilSanOad

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks