General

  • Target

    JaffaCakes118_ea9173749650ee0826d79534f1b5ef96bb258c880e39174222e04b66402a9e5a

  • Size

    166KB

  • Sample

    241224-ve4d5ssnfp

  • MD5

    d0ba8ed4ce33c418d576955e00c9cae7

  • SHA1

    290c9064e569ca57241d0314edf5bcb2a819524d

  • SHA256

    ea9173749650ee0826d79534f1b5ef96bb258c880e39174222e04b66402a9e5a

  • SHA512

    f1fe4148e801ae76dad801df7f0fe28c92133e637fd8e4a25c9d4431efbe79b5c7cba20fe2c6d11a8b799a66893ebe488c02c61ac6e40ba283a4c42f1e4762ff

  • SSDEEP

    3072:KuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+jN:K0czbty9uiaJlqN

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ea9173749650ee0826d79534f1b5ef96bb258c880e39174222e04b66402a9e5a

    • Size

      166KB

    • MD5

      d0ba8ed4ce33c418d576955e00c9cae7

    • SHA1

      290c9064e569ca57241d0314edf5bcb2a819524d

    • SHA256

      ea9173749650ee0826d79534f1b5ef96bb258c880e39174222e04b66402a9e5a

    • SHA512

      f1fe4148e801ae76dad801df7f0fe28c92133e637fd8e4a25c9d4431efbe79b5c7cba20fe2c6d11a8b799a66893ebe488c02c61ac6e40ba283a4c42f1e4762ff

    • SSDEEP

      3072:KuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+jN:K0czbty9uiaJlqN

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks