General

  • Target

    JaffaCakes118_aea5b50d6be3e1f15d894919d0672a2d59bff1c742bab4fd8626b85a82de0c57

  • Size

    166KB

  • Sample

    241225-a9zzzsspap

  • MD5

    3efbbe6aa5498e5b2cd99600f833cd3d

  • SHA1

    4aba894af71606b0452973ce999e9030092c7e99

  • SHA256

    aea5b50d6be3e1f15d894919d0672a2d59bff1c742bab4fd8626b85a82de0c57

  • SHA512

    6637404d9176829e0266667dd7189dff6340529fa883ead891404027a9f39f25d548096db324a3dcbe21ce1e35a724e67be821c2c4b601a9b78915ad2aafe84a

  • SSDEEP

    3072:SuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:S0czbty9uiaJlHE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_aea5b50d6be3e1f15d894919d0672a2d59bff1c742bab4fd8626b85a82de0c57

    • Size

      166KB

    • MD5

      3efbbe6aa5498e5b2cd99600f833cd3d

    • SHA1

      4aba894af71606b0452973ce999e9030092c7e99

    • SHA256

      aea5b50d6be3e1f15d894919d0672a2d59bff1c742bab4fd8626b85a82de0c57

    • SHA512

      6637404d9176829e0266667dd7189dff6340529fa883ead891404027a9f39f25d548096db324a3dcbe21ce1e35a724e67be821c2c4b601a9b78915ad2aafe84a

    • SSDEEP

      3072:SuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:S0czbty9uiaJlHE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks