General

  • Target

    JaffaCakes118_e1567362202416f2c289e5964f5fae81b154ac409b2a8d0e317181760f2e6999

  • Size

    166KB

  • Sample

    241229-jrjpqawrgt

  • MD5

    a196dfd7ac62726a4dddc1960051aed5

  • SHA1

    a9eb6d2bea5cead1d6af8b2ce7207917be4f60f9

  • SHA256

    e1567362202416f2c289e5964f5fae81b154ac409b2a8d0e317181760f2e6999

  • SHA512

    43ab668257a999939d1c4b27c8a75bb35b53af897aa5af09d73bebe873090b97d2989247afc70f5c08f01dddf49995515630ae280f962d294baed39de7bd8d0a

  • SSDEEP

    3072:WuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+rS:W0czbty9uiaJluS

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e1567362202416f2c289e5964f5fae81b154ac409b2a8d0e317181760f2e6999

    • Size

      166KB

    • MD5

      a196dfd7ac62726a4dddc1960051aed5

    • SHA1

      a9eb6d2bea5cead1d6af8b2ce7207917be4f60f9

    • SHA256

      e1567362202416f2c289e5964f5fae81b154ac409b2a8d0e317181760f2e6999

    • SHA512

      43ab668257a999939d1c4b27c8a75bb35b53af897aa5af09d73bebe873090b97d2989247afc70f5c08f01dddf49995515630ae280f962d294baed39de7bd8d0a

    • SSDEEP

      3072:WuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+rS:W0czbty9uiaJluS

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks