General

  • Target

    JaffaCakes118_715e9e85e3287cf116109f9399303116a6af2361fd19b3c5df7673286eaf852f

  • Size

    162KB

  • Sample

    241221-186dgssjal

  • MD5

    6ae2fa0381150bde13c5f3df5c87c814

  • SHA1

    58604467bcf7e57bed992803d08f76d4bd123f26

  • SHA256

    715e9e85e3287cf116109f9399303116a6af2361fd19b3c5df7673286eaf852f

  • SHA512

    497e19986ddac76d77466c6ff38924967d1753deb307384f0af6ff647aa907021b85259cc6c8f0624c34c07485964cec83a5597c89e023e7d913c0ae93221150

  • SSDEEP

    3072:aesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLiV:s4+VZQpt5hyPsa1ekiE9V

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_715e9e85e3287cf116109f9399303116a6af2361fd19b3c5df7673286eaf852f

    • Size

      162KB

    • MD5

      6ae2fa0381150bde13c5f3df5c87c814

    • SHA1

      58604467bcf7e57bed992803d08f76d4bd123f26

    • SHA256

      715e9e85e3287cf116109f9399303116a6af2361fd19b3c5df7673286eaf852f

    • SHA512

      497e19986ddac76d77466c6ff38924967d1753deb307384f0af6ff647aa907021b85259cc6c8f0624c34c07485964cec83a5597c89e023e7d913c0ae93221150

    • SSDEEP

      3072:aesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLiV:s4+VZQpt5hyPsa1ekiE9V

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks