General

  • Target

    JaffaCakes118_5f25c2b7bd25127be49370b70b9b7c555a1115e97ccbdc54304414ac503fd9e6

  • Size

    166KB

  • Sample

    241224-vywteaspez

  • MD5

    5c63d4da504af1449eccc33cc507d374

  • SHA1

    706d961fc3b03e0b0a67679d763b9a7c83da7ab2

  • SHA256

    5f25c2b7bd25127be49370b70b9b7c555a1115e97ccbdc54304414ac503fd9e6

  • SHA512

    1e988295d2a98527b498766b896f4d8629b04ae2787a91269ffd5f3c0372386ca1e6a86dc50808ebee0fd7af598c706e4acca61f9ba0418538dc3e7bede9aaa6

  • SSDEEP

    3072:ouFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+24:o0czbty9uiaJlP4

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5f25c2b7bd25127be49370b70b9b7c555a1115e97ccbdc54304414ac503fd9e6

    • Size

      166KB

    • MD5

      5c63d4da504af1449eccc33cc507d374

    • SHA1

      706d961fc3b03e0b0a67679d763b9a7c83da7ab2

    • SHA256

      5f25c2b7bd25127be49370b70b9b7c555a1115e97ccbdc54304414ac503fd9e6

    • SHA512

      1e988295d2a98527b498766b896f4d8629b04ae2787a91269ffd5f3c0372386ca1e6a86dc50808ebee0fd7af598c706e4acca61f9ba0418538dc3e7bede9aaa6

    • SSDEEP

      3072:ouFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+24:o0czbty9uiaJlP4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks