General

  • Target

    JaffaCakes118_77a5cc6eb1e9e312aea84f97b7686098d08e0a5b34724948a0a8b9c660dc3950

  • Size

    166KB

  • Sample

    241224-148caayng1

  • MD5

    9cfc47f1a31cf51a45f0ec3c4b24c9ae

  • SHA1

    98e94fb5c11dcb8e51059aa8ff6dec80687dfa82

  • SHA256

    77a5cc6eb1e9e312aea84f97b7686098d08e0a5b34724948a0a8b9c660dc3950

  • SHA512

    510deb4e5e8226d74582ce46b0c30ede5a77aa5d022d6ff4b981524a242ece11e387cb5950b3f188dfafd83a994cdf5da730351ccd78c9250f4ad1a554f51087

  • SSDEEP

    3072:suFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:s0czbty9uiaJlHE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_77a5cc6eb1e9e312aea84f97b7686098d08e0a5b34724948a0a8b9c660dc3950

    • Size

      166KB

    • MD5

      9cfc47f1a31cf51a45f0ec3c4b24c9ae

    • SHA1

      98e94fb5c11dcb8e51059aa8ff6dec80687dfa82

    • SHA256

      77a5cc6eb1e9e312aea84f97b7686098d08e0a5b34724948a0a8b9c660dc3950

    • SHA512

      510deb4e5e8226d74582ce46b0c30ede5a77aa5d022d6ff4b981524a242ece11e387cb5950b3f188dfafd83a994cdf5da730351ccd78c9250f4ad1a554f51087

    • SSDEEP

      3072:suFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:s0czbty9uiaJlHE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks