General

  • Target

    JaffaCakes118_954f6c4ea2ff5cab187dd3a580d1ff6ded5daa2c4e979af3d1dc91721e966640

  • Size

    166KB

  • Sample

    241222-gqz9zaxjer

  • MD5

    5dbe7efd90389a808f7dc79a86dcfd19

  • SHA1

    4db851a4ce6ac4e9175adead424b788905441629

  • SHA256

    954f6c4ea2ff5cab187dd3a580d1ff6ded5daa2c4e979af3d1dc91721e966640

  • SHA512

    d1e1b338ded1a59096800ddb1e6619eb6e8731f75ab17556c48cc1b9a16edf11f77694f87b24c4ade3d80ac9790ae87db50ea292529a51d9b20dc6555977faec

  • SSDEEP

    3072:8uFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:80czbty9uiaJlHE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_954f6c4ea2ff5cab187dd3a580d1ff6ded5daa2c4e979af3d1dc91721e966640

    • Size

      166KB

    • MD5

      5dbe7efd90389a808f7dc79a86dcfd19

    • SHA1

      4db851a4ce6ac4e9175adead424b788905441629

    • SHA256

      954f6c4ea2ff5cab187dd3a580d1ff6ded5daa2c4e979af3d1dc91721e966640

    • SHA512

      d1e1b338ded1a59096800ddb1e6619eb6e8731f75ab17556c48cc1b9a16edf11f77694f87b24c4ade3d80ac9790ae87db50ea292529a51d9b20dc6555977faec

    • SSDEEP

      3072:8uFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:80czbty9uiaJlHE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks