General

  • Target

    JaffaCakes118_3b2be481f4000ac91ad5cfb22f337d6d586ef43ab5d8ebec97407785dd1d85e0

  • Size

    162KB

  • Sample

    241225-ydydaavmfn

  • MD5

    84a3ec97e60042685035bd38973ca32a

  • SHA1

    aae7dd4ae784dd5cfc81d6cfbc5f541f4399c716

  • SHA256

    3b2be481f4000ac91ad5cfb22f337d6d586ef43ab5d8ebec97407785dd1d85e0

  • SHA512

    395d858d938b66b57f3c29fbcd952b295cd10147f1c6d11d028e449afb520b53b4ed7977b6efb06ee5b1f8beb5864de0b5f2e3a7ed894643f272a2073f95b2ed

  • SSDEEP

    3072:Uesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:u4+VZQpt5hyPsa1ekiEyL

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3b2be481f4000ac91ad5cfb22f337d6d586ef43ab5d8ebec97407785dd1d85e0

    • Size

      162KB

    • MD5

      84a3ec97e60042685035bd38973ca32a

    • SHA1

      aae7dd4ae784dd5cfc81d6cfbc5f541f4399c716

    • SHA256

      3b2be481f4000ac91ad5cfb22f337d6d586ef43ab5d8ebec97407785dd1d85e0

    • SHA512

      395d858d938b66b57f3c29fbcd952b295cd10147f1c6d11d028e449afb520b53b4ed7977b6efb06ee5b1f8beb5864de0b5f2e3a7ed894643f272a2073f95b2ed

    • SSDEEP

      3072:Uesl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:u4+VZQpt5hyPsa1ekiEyL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks