General

  • Target

    JaffaCakes118_0e2ed66ec03ce95726ac58c6b1dca7ae76a202358ab2b7b306741b9846f14b97

  • Size

    161KB

  • Sample

    241223-xxtc1aykak

  • MD5

    c8eed848f0032a0cf9eb526ca2f2890e

  • SHA1

    1352c19886696968639dbfef0ae2c29c61992f13

  • SHA256

    0e2ed66ec03ce95726ac58c6b1dca7ae76a202358ab2b7b306741b9846f14b97

  • SHA512

    b5f2750bb4935a40a6112bc3e3b4b99bcee6e0b81145f76d12b29d2d54eb12a49896771f3a3a1c0acc77195718a9b3275c0b28dc62456445b69ab77fe06ec89b

  • SSDEEP

    3072:8b63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUSCx3:Sa/jkvhSlP/7bg8aFnA3brA

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0e2ed66ec03ce95726ac58c6b1dca7ae76a202358ab2b7b306741b9846f14b97

    • Size

      161KB

    • MD5

      c8eed848f0032a0cf9eb526ca2f2890e

    • SHA1

      1352c19886696968639dbfef0ae2c29c61992f13

    • SHA256

      0e2ed66ec03ce95726ac58c6b1dca7ae76a202358ab2b7b306741b9846f14b97

    • SHA512

      b5f2750bb4935a40a6112bc3e3b4b99bcee6e0b81145f76d12b29d2d54eb12a49896771f3a3a1c0acc77195718a9b3275c0b28dc62456445b69ab77fe06ec89b

    • SSDEEP

      3072:8b63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUSCx3:Sa/jkvhSlP/7bg8aFnA3brA

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks