General

  • Target

    JaffaCakes118_a117362e7a5a4cb6c08bc9d4f3566f882037f3280c92f1abbee11977f52404d6

  • Size

    161KB

  • Sample

    241221-3x742svmgl

  • MD5

    3cdbd7d51b510b73eaf825be35efd0d9

  • SHA1

    3dba0e709631383669a7e897df0e94dab2cd5a5a

  • SHA256

    a117362e7a5a4cb6c08bc9d4f3566f882037f3280c92f1abbee11977f52404d6

  • SHA512

    67dd79ae8ce6ace54e4ee2c275cb2621103fefd8244254ee68fa962ab80255ad9bde5d5457fbb98d0b6caa18f316c7b69be073fcfad8819afc1ed056ccfed61f

  • SSDEEP

    3072:9pJZRGSBBcRAhzHoCUP14kVH0x4CDcz8RKGR4VfG7Gekj00JXtN9Xm5nA:DJZUSBaRARoCgdH0xtXKGRv7GekP9a5n

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a117362e7a5a4cb6c08bc9d4f3566f882037f3280c92f1abbee11977f52404d6

    • Size

      161KB

    • MD5

      3cdbd7d51b510b73eaf825be35efd0d9

    • SHA1

      3dba0e709631383669a7e897df0e94dab2cd5a5a

    • SHA256

      a117362e7a5a4cb6c08bc9d4f3566f882037f3280c92f1abbee11977f52404d6

    • SHA512

      67dd79ae8ce6ace54e4ee2c275cb2621103fefd8244254ee68fa962ab80255ad9bde5d5457fbb98d0b6caa18f316c7b69be073fcfad8819afc1ed056ccfed61f

    • SSDEEP

      3072:9pJZRGSBBcRAhzHoCUP14kVH0x4CDcz8RKGR4VfG7Gekj00JXtN9Xm5nA:DJZUSBaRARoCgdH0xtXKGRv7GekP9a5n

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks