General

  • Target

    JaffaCakes118_9ded12410562a96784ea79776154b3412ca15768387c89463bf5fc59110a08a3

  • Size

    166KB

  • Sample

    241222-kcvn4s1kfs

  • MD5

    d83f83c6a5f6a7988d1cc1542ed4a5a7

  • SHA1

    a0428b1407222bdf6d8194bc6d97efdae2d11b00

  • SHA256

    9ded12410562a96784ea79776154b3412ca15768387c89463bf5fc59110a08a3

  • SHA512

    39475c6dd74b04200c9223f2d7a1092f24eeef19280093bf79c649a16e278a0fd52e8d60fdff7da35027fc8676a53207cb6ccf64f196a34c4f40978e9b30d64d

  • SSDEEP

    3072:LuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+JU:L0czbty9uiaJlcU

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9ded12410562a96784ea79776154b3412ca15768387c89463bf5fc59110a08a3

    • Size

      166KB

    • MD5

      d83f83c6a5f6a7988d1cc1542ed4a5a7

    • SHA1

      a0428b1407222bdf6d8194bc6d97efdae2d11b00

    • SHA256

      9ded12410562a96784ea79776154b3412ca15768387c89463bf5fc59110a08a3

    • SHA512

      39475c6dd74b04200c9223f2d7a1092f24eeef19280093bf79c649a16e278a0fd52e8d60fdff7da35027fc8676a53207cb6ccf64f196a34c4f40978e9b30d64d

    • SSDEEP

      3072:LuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+JU:L0czbty9uiaJlcU

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks