General

  • Target

    JaffaCakes118_0972019f291081f19887640fa6e1bffbb9ce00059084d268c06a8d9e0088c84e

  • Size

    166KB

  • Sample

    241223-szsf9stkgx

  • MD5

    c979ff3648c062f36e8f4a58d8ccd2ad

  • SHA1

    0e71bf49a1e6e201a8267ed1b6b70a16e2991825

  • SHA256

    0972019f291081f19887640fa6e1bffbb9ce00059084d268c06a8d9e0088c84e

  • SHA512

    f06da9f1403d1ac155fbfa46d2099f3fbf2db988e40401fe4a170752ded84932643ef504eed829e527bf48fd83d33d9a78e39d49327dd1bca617a07ccd3f7e4e

  • SSDEEP

    3072:tuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+rS:t0czbty9uiaJluS

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0972019f291081f19887640fa6e1bffbb9ce00059084d268c06a8d9e0088c84e

    • Size

      166KB

    • MD5

      c979ff3648c062f36e8f4a58d8ccd2ad

    • SHA1

      0e71bf49a1e6e201a8267ed1b6b70a16e2991825

    • SHA256

      0972019f291081f19887640fa6e1bffbb9ce00059084d268c06a8d9e0088c84e

    • SHA512

      f06da9f1403d1ac155fbfa46d2099f3fbf2db988e40401fe4a170752ded84932643ef504eed829e527bf48fd83d33d9a78e39d49327dd1bca617a07ccd3f7e4e

    • SSDEEP

      3072:tuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+rS:t0czbty9uiaJluS

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks