General

  • Target

    JaffaCakes118_35a7d3e0d492ed9e8a8b4d32a7b292a5aa911d10f9d13844e932aae9826d8517

  • Size

    166KB

  • Sample

    241224-x5bg6avnfj

  • MD5

    839d7d2b55bbb56251ffc80da963dde4

  • SHA1

    f5541234cece135064607b0c4ddc803d371179ab

  • SHA256

    35a7d3e0d492ed9e8a8b4d32a7b292a5aa911d10f9d13844e932aae9826d8517

  • SHA512

    41fad2b5a12ed2d99fa1acb18dea69cae2bdffed6dfdbd7ea81d276ee56a536e7937bccc99de5c46656121395e3bc896b582d41fa2955a42e8f45f7733ab554d

  • SSDEEP

    3072:xuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+24:x0czbty9uiaJlP4

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_35a7d3e0d492ed9e8a8b4d32a7b292a5aa911d10f9d13844e932aae9826d8517

    • Size

      166KB

    • MD5

      839d7d2b55bbb56251ffc80da963dde4

    • SHA1

      f5541234cece135064607b0c4ddc803d371179ab

    • SHA256

      35a7d3e0d492ed9e8a8b4d32a7b292a5aa911d10f9d13844e932aae9826d8517

    • SHA512

      41fad2b5a12ed2d99fa1acb18dea69cae2bdffed6dfdbd7ea81d276ee56a536e7937bccc99de5c46656121395e3bc896b582d41fa2955a42e8f45f7733ab554d

    • SSDEEP

      3072:xuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+24:x0czbty9uiaJlP4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks