General

  • Target

    JaffaCakes118_edaeb950a94f3192a18288f6cdd42c0239a4444bc6f640b6d9da00c38ccfe125

  • Size

    166KB

  • Sample

    241224-z281csxmhz

  • MD5

    723fc43b36ed7f7992793d36f0e17526

  • SHA1

    70dda5669c67eb30be2e15ea95b6765a17082aaa

  • SHA256

    edaeb950a94f3192a18288f6cdd42c0239a4444bc6f640b6d9da00c38ccfe125

  • SHA512

    ed5a513892bb2d611d9e9351af04e1fa4ba4b42457300d23a0b9bde1b8b05df8a2e449e1f1386ad3691a18e57f67b52cbcd3cdac576f7a39fb49ba8c563e730d

  • SSDEEP

    3072:IuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:I0czbty9uiaJlHE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_edaeb950a94f3192a18288f6cdd42c0239a4444bc6f640b6d9da00c38ccfe125

    • Size

      166KB

    • MD5

      723fc43b36ed7f7992793d36f0e17526

    • SHA1

      70dda5669c67eb30be2e15ea95b6765a17082aaa

    • SHA256

      edaeb950a94f3192a18288f6cdd42c0239a4444bc6f640b6d9da00c38ccfe125

    • SHA512

      ed5a513892bb2d611d9e9351af04e1fa4ba4b42457300d23a0b9bde1b8b05df8a2e449e1f1386ad3691a18e57f67b52cbcd3cdac576f7a39fb49ba8c563e730d

    • SSDEEP

      3072:IuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:I0czbty9uiaJlHE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks