General

  • Target

    JaffaCakes118_f696efd7af501898352c39b2f352458302ff7100a77f44507642c2c7186e00ea

  • Size

    162KB

  • Sample

    241225-bnjxbatjcr

  • MD5

    215497bb6ca15a297fafd0ee620e5c89

  • SHA1

    a5fa6d126e06cc133efea406fe3c2387e3f22177

  • SHA256

    f696efd7af501898352c39b2f352458302ff7100a77f44507642c2c7186e00ea

  • SHA512

    df12196814ef7c65125fe4ef3d411e11b99f50e0672767111c686bc145244ea278b684e475cb931338e668c2316a31b55960af2cdffd186fa812d177cc9fe391

  • SSDEEP

    3072:w8esl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:wm4+VZQpt5hyPsa1ekiEyL

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f696efd7af501898352c39b2f352458302ff7100a77f44507642c2c7186e00ea

    • Size

      162KB

    • MD5

      215497bb6ca15a297fafd0ee620e5c89

    • SHA1

      a5fa6d126e06cc133efea406fe3c2387e3f22177

    • SHA256

      f696efd7af501898352c39b2f352458302ff7100a77f44507642c2c7186e00ea

    • SHA512

      df12196814ef7c65125fe4ef3d411e11b99f50e0672767111c686bc145244ea278b684e475cb931338e668c2316a31b55960af2cdffd186fa812d177cc9fe391

    • SSDEEP

      3072:w8esl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:wm4+VZQpt5hyPsa1ekiEyL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks