General

  • Target

    JaffaCakes118_9a8f99e3732b5d4678790dfb1f45032f6fdbc01c920869527e99d57758a2a06c

  • Size

    166KB

  • Sample

    241229-15kbvayldm

  • MD5

    92c3c158638274fc235867a9e01b66a1

  • SHA1

    05b5f48350197b9e23d33a65732d7561f8021f41

  • SHA256

    9a8f99e3732b5d4678790dfb1f45032f6fdbc01c920869527e99d57758a2a06c

  • SHA512

    862e308a241b5011b75e183217099339b8cec79192a55a7fa1e692a5435dcb3584e7b975c05da100a046605335b5eae47cf330c79c0b1d523192261a10581171

  • SSDEEP

    3072:IuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+jN:I0czbty9uiaJlqN

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9a8f99e3732b5d4678790dfb1f45032f6fdbc01c920869527e99d57758a2a06c

    • Size

      166KB

    • MD5

      92c3c158638274fc235867a9e01b66a1

    • SHA1

      05b5f48350197b9e23d33a65732d7561f8021f41

    • SHA256

      9a8f99e3732b5d4678790dfb1f45032f6fdbc01c920869527e99d57758a2a06c

    • SHA512

      862e308a241b5011b75e183217099339b8cec79192a55a7fa1e692a5435dcb3584e7b975c05da100a046605335b5eae47cf330c79c0b1d523192261a10581171

    • SSDEEP

      3072:IuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+jN:I0czbty9uiaJlqN

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks