General

  • Target

    JaffaCakes118_3ee894551e91b8bf540b3a6188afd8555a1b55574e478fece826f4d6d5b5b60f

  • Size

    161KB

  • Sample

    241223-xkq24sxqar

  • MD5

    2cdd810358b9248b53bd49947d4c9bb0

  • SHA1

    052270fb0cff3abf963b8284864a9fe7460e96b4

  • SHA256

    3ee894551e91b8bf540b3a6188afd8555a1b55574e478fece826f4d6d5b5b60f

  • SHA512

    026c13ac3afd658b78d0b3ee7f18dc450d1d89058e61aca4e471efce9c3b5c818db970df3defd288b8b4a2208693d621d6f9085122e0d89425727aa747f240e8

  • SSDEEP

    3072:7545bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:F4KcMhVkbK3hDq9E8i

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.55.134.126:443

67.207.83.96:8172

193.160.214.95:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3ee894551e91b8bf540b3a6188afd8555a1b55574e478fece826f4d6d5b5b60f

    • Size

      161KB

    • MD5

      2cdd810358b9248b53bd49947d4c9bb0

    • SHA1

      052270fb0cff3abf963b8284864a9fe7460e96b4

    • SHA256

      3ee894551e91b8bf540b3a6188afd8555a1b55574e478fece826f4d6d5b5b60f

    • SHA512

      026c13ac3afd658b78d0b3ee7f18dc450d1d89058e61aca4e471efce9c3b5c818db970df3defd288b8b4a2208693d621d6f9085122e0d89425727aa747f240e8

    • SSDEEP

      3072:7545bscWrhftr4SOX63M5jY17lh9sDVj9a/KBz9YlYU:F4KcMhVkbK3hDq9E8i

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks