General

  • Target

    JaffaCakes118_4f706279740672551d68466c88a0f2a822d5364599005154fe2d2ed19eb53e71

  • Size

    161KB

  • Sample

    241224-cn2b2ayrcq

  • MD5

    6eecf1c9b67f24305b751f2877240921

  • SHA1

    3894ab412f3ccbf901611b1fc6fbdd9042779cff

  • SHA256

    4f706279740672551d68466c88a0f2a822d5364599005154fe2d2ed19eb53e71

  • SHA512

    dbb9116bdb4b823e299941e1996d33f0a85f8b692164a86238fa9a2126869620988202117670502d63450e73af0734daa4aedbdeaaf95fbac9e7051be36340c0

  • SSDEEP

    3072:8d63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrU1Cx3:Qa/jkvhSlP/7bg8aFnA3brX

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4f706279740672551d68466c88a0f2a822d5364599005154fe2d2ed19eb53e71

    • Size

      161KB

    • MD5

      6eecf1c9b67f24305b751f2877240921

    • SHA1

      3894ab412f3ccbf901611b1fc6fbdd9042779cff

    • SHA256

      4f706279740672551d68466c88a0f2a822d5364599005154fe2d2ed19eb53e71

    • SHA512

      dbb9116bdb4b823e299941e1996d33f0a85f8b692164a86238fa9a2126869620988202117670502d63450e73af0734daa4aedbdeaaf95fbac9e7051be36340c0

    • SSDEEP

      3072:8d63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrU1Cx3:Qa/jkvhSlP/7bg8aFnA3brX

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks