General

  • Target

    JaffaCakes118_632949ab024f7fbcde87fffaad3b07f2315626832a33a3317202a680af39ba46

  • Size

    161KB

  • Sample

    241223-wg49wswqap

  • MD5

    23512a9b19fdb4dd2948c3f8a9098e03

  • SHA1

    04d26572386593d118e70cef3324048eca305e29

  • SHA256

    632949ab024f7fbcde87fffaad3b07f2315626832a33a3317202a680af39ba46

  • SHA512

    27af8b3655625e470b1eec57d7c893853812dc79e0569617b0a208a444825790c53ea342f19b3339a45c5e1b88e391bf6c29624ebc014c4bd20ff8397194321e

  • SSDEEP

    3072:Fd63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrU1Cx3:La/jkvhSlP/7bg8aFnA3brX

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_632949ab024f7fbcde87fffaad3b07f2315626832a33a3317202a680af39ba46

    • Size

      161KB

    • MD5

      23512a9b19fdb4dd2948c3f8a9098e03

    • SHA1

      04d26572386593d118e70cef3324048eca305e29

    • SHA256

      632949ab024f7fbcde87fffaad3b07f2315626832a33a3317202a680af39ba46

    • SHA512

      27af8b3655625e470b1eec57d7c893853812dc79e0569617b0a208a444825790c53ea342f19b3339a45c5e1b88e391bf6c29624ebc014c4bd20ff8397194321e

    • SSDEEP

      3072:Fd63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrU1Cx3:La/jkvhSlP/7bg8aFnA3brX

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks