General

  • Target

    JaffaCakes118_774981c8157936d9881dadc6e1e2fb6bb54284b14a3616e706b34eefa8c4c4b6

  • Size

    161KB

  • Sample

    241224-djccsazrhj

  • MD5

    94dea749bfb05208dceddb8b65e47f8f

  • SHA1

    7bcfef8490efa613460773e07c2fc0fab6a85ed6

  • SHA256

    774981c8157936d9881dadc6e1e2fb6bb54284b14a3616e706b34eefa8c4c4b6

  • SHA512

    7e5a92cb3c59585b74b804846ec7b637c1789e43daae71df8d898ee25aaa33a0cf06276b8d1a9a2249f67b5ad42ec2b26778a548a2500f861f982674bd1092bb

  • SSDEEP

    3072:GH63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUHCx3:4a/jkvhSlP/7bg8aFnA3brp

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_774981c8157936d9881dadc6e1e2fb6bb54284b14a3616e706b34eefa8c4c4b6

    • Size

      161KB

    • MD5

      94dea749bfb05208dceddb8b65e47f8f

    • SHA1

      7bcfef8490efa613460773e07c2fc0fab6a85ed6

    • SHA256

      774981c8157936d9881dadc6e1e2fb6bb54284b14a3616e706b34eefa8c4c4b6

    • SHA512

      7e5a92cb3c59585b74b804846ec7b637c1789e43daae71df8d898ee25aaa33a0cf06276b8d1a9a2249f67b5ad42ec2b26778a548a2500f861f982674bd1092bb

    • SSDEEP

      3072:GH63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUHCx3:4a/jkvhSlP/7bg8aFnA3brp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks