General

  • Target

    JaffaCakes118_dde5165e4029c2d82117679165546d7d5d82b4b24a14e85b42d922a04847a0c1

  • Size

    166KB

  • Sample

    241224-mf2b6svngr

  • MD5

    a2d0684026e824d2ba6be5c078a74808

  • SHA1

    0682c2f056b5907474d8456e6e0b930dde7b7793

  • SHA256

    dde5165e4029c2d82117679165546d7d5d82b4b24a14e85b42d922a04847a0c1

  • SHA512

    5f1823b08a280c955781d1e9913ef401b761115c895034912717952faa5518a6f23952f4bedc604f4b57d3dca2eb112e9ddce299d7e31525c83035af656bcec2

  • SSDEEP

    3072:/uFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+rS:/0czbty9uiaJluS

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_dde5165e4029c2d82117679165546d7d5d82b4b24a14e85b42d922a04847a0c1

    • Size

      166KB

    • MD5

      a2d0684026e824d2ba6be5c078a74808

    • SHA1

      0682c2f056b5907474d8456e6e0b930dde7b7793

    • SHA256

      dde5165e4029c2d82117679165546d7d5d82b4b24a14e85b42d922a04847a0c1

    • SHA512

      5f1823b08a280c955781d1e9913ef401b761115c895034912717952faa5518a6f23952f4bedc604f4b57d3dca2eb112e9ddce299d7e31525c83035af656bcec2

    • SSDEEP

      3072:/uFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+rS:/0czbty9uiaJluS

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks