General

  • Target

    JaffaCakes118_fd368214b850b68581282228f1830eb4bdc7a950f6cea43e0fe4a0d1626c7b28

  • Size

    161KB

  • Sample

    241223-1av5vs1re1

  • MD5

    3eefdf783a903db678fcc2f1009788d1

  • SHA1

    7d238305a7ea19a07ae822db3d7a86837f58cdc7

  • SHA256

    fd368214b850b68581282228f1830eb4bdc7a950f6cea43e0fe4a0d1626c7b28

  • SHA512

    024175b3e4244560da1c6572e3cab0d1872c657824b5ed4763f0fda9aaedc294ebf4341d6bf396f22b3c5d087c45cd6f6f4437e99800387307d8fa15418e282d

  • SSDEEP

    3072:7H63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUHCx3:ba/jkvhSlP/7bg8aFnA3brp

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fd368214b850b68581282228f1830eb4bdc7a950f6cea43e0fe4a0d1626c7b28

    • Size

      161KB

    • MD5

      3eefdf783a903db678fcc2f1009788d1

    • SHA1

      7d238305a7ea19a07ae822db3d7a86837f58cdc7

    • SHA256

      fd368214b850b68581282228f1830eb4bdc7a950f6cea43e0fe4a0d1626c7b28

    • SHA512

      024175b3e4244560da1c6572e3cab0d1872c657824b5ed4763f0fda9aaedc294ebf4341d6bf396f22b3c5d087c45cd6f6f4437e99800387307d8fa15418e282d

    • SSDEEP

      3072:7H63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUHCx3:ba/jkvhSlP/7bg8aFnA3brp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks