General

  • Target

    JaffaCakes118_e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4

  • Size

    160KB

  • Sample

    241223-1cv8mssjaz

  • MD5

    0e4e6e2851dfbf3fb7458e01d9b1e49b

  • SHA1

    46bd8b7b3101b971d41afdbca0b5e1ae8ba3b727

  • SHA256

    e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4

  • SHA512

    ccc6fa924b8b2dd6c2fdda065983dd1736b45494f0783adb3bf802cdc2a86082ed3e309b40ad91bbe375f37392ac78144cccc3de8541e93112d95b99678948dd

  • SSDEEP

    3072:r/FbrEzD9N+RiMB00c9/74DXE+JgaV7IPx+e6O/pPtaL+m:ZbrE1kvcB74DXZ2Melrm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4

    • Size

      160KB

    • MD5

      0e4e6e2851dfbf3fb7458e01d9b1e49b

    • SHA1

      46bd8b7b3101b971d41afdbca0b5e1ae8ba3b727

    • SHA256

      e7263aee82c803dafe6c5fca405abbcae1f88695d578182fcc4d98569b59c4d4

    • SHA512

      ccc6fa924b8b2dd6c2fdda065983dd1736b45494f0783adb3bf802cdc2a86082ed3e309b40ad91bbe375f37392ac78144cccc3de8541e93112d95b99678948dd

    • SSDEEP

      3072:r/FbrEzD9N+RiMB00c9/74DXE+JgaV7IPx+e6O/pPtaL+m:ZbrE1kvcB74DXZ2Melrm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks