General

  • Target

    JaffaCakes118_6735369eda1e744c6f899906c203c5f78a6b7a2caa51b66cbd32d9ebfe1c5690

  • Size

    166KB

  • Sample

    241222-jq8mfszpfl

  • MD5

    a70f3a6f843bdbbdcc0af9533b2672e5

  • SHA1

    1b9f1b101689f1a6912d7f79c4431a1eac79cfe9

  • SHA256

    6735369eda1e744c6f899906c203c5f78a6b7a2caa51b66cbd32d9ebfe1c5690

  • SHA512

    2fd6ce71778626a7987174009ebb92707272cdc832c03f99d3aac0a081bf234b15ee4f171447ea122d35aa9534727c6482cd0bd5e9b99b9839977fddc4330648

  • SSDEEP

    3072:AuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+qa:A0czbty9uiaJlva

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6735369eda1e744c6f899906c203c5f78a6b7a2caa51b66cbd32d9ebfe1c5690

    • Size

      166KB

    • MD5

      a70f3a6f843bdbbdcc0af9533b2672e5

    • SHA1

      1b9f1b101689f1a6912d7f79c4431a1eac79cfe9

    • SHA256

      6735369eda1e744c6f899906c203c5f78a6b7a2caa51b66cbd32d9ebfe1c5690

    • SHA512

      2fd6ce71778626a7987174009ebb92707272cdc832c03f99d3aac0a081bf234b15ee4f171447ea122d35aa9534727c6482cd0bd5e9b99b9839977fddc4330648

    • SSDEEP

      3072:AuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+qa:A0czbty9uiaJlva

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks