General

  • Target

    JaffaCakes118_9ca1bd7c09ec754956f6227e6658da047b8bd9544eb1af4e1a0e60dadc3b2818

  • Size

    166KB

  • Sample

    241222-yteacaxmbw

  • MD5

    dd7ec2412bdd0b2958170596f92715c1

  • SHA1

    da0480f9807124f0a0f7cf8eef215e5b0b0cf211

  • SHA256

    9ca1bd7c09ec754956f6227e6658da047b8bd9544eb1af4e1a0e60dadc3b2818

  • SHA512

    b2bf6c9b7ff846b17eabc2be891f77c5ef93a19eba60eb493b16c60297a176f330b2377beb0e7628ce93acb25c83035a73d80a017fa97c636976eb9f0c714e23

  • SSDEEP

    3072:iuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+qa:i0czbty9uiaJlva

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9ca1bd7c09ec754956f6227e6658da047b8bd9544eb1af4e1a0e60dadc3b2818

    • Size

      166KB

    • MD5

      dd7ec2412bdd0b2958170596f92715c1

    • SHA1

      da0480f9807124f0a0f7cf8eef215e5b0b0cf211

    • SHA256

      9ca1bd7c09ec754956f6227e6658da047b8bd9544eb1af4e1a0e60dadc3b2818

    • SHA512

      b2bf6c9b7ff846b17eabc2be891f77c5ef93a19eba60eb493b16c60297a176f330b2377beb0e7628ce93acb25c83035a73d80a017fa97c636976eb9f0c714e23

    • SSDEEP

      3072:iuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+qa:i0czbty9uiaJlva

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks