General

  • Target

    JaffaCakes118_12669365a06f8c0380b2f045c5d21ef89775c5c44779aa39a72dc81a60190f6e

  • Size

    162KB

  • Sample

    241229-lq9kvsymcx

  • MD5

    dcf7418479af519ccda5a4705cead860

  • SHA1

    5ea56e7d9bed6a32b690d4c60f5582f5c243843c

  • SHA256

    12669365a06f8c0380b2f045c5d21ef89775c5c44779aa39a72dc81a60190f6e

  • SHA512

    7084057d586ec2becb8f39f1cd92078141b644b58b592fb4f484d7fb557d34e33f5f056f4b717e5c85a27ae2ee6d20faef0c8744eca9944213ab9d1f3efb259b

  • SSDEEP

    3072:+esl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:w4+VZQpt5hyPsa1ekiEyL

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

203.114.109.124:443

82.165.145.100:6601

94.177.255.18:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_12669365a06f8c0380b2f045c5d21ef89775c5c44779aa39a72dc81a60190f6e

    • Size

      162KB

    • MD5

      dcf7418479af519ccda5a4705cead860

    • SHA1

      5ea56e7d9bed6a32b690d4c60f5582f5c243843c

    • SHA256

      12669365a06f8c0380b2f045c5d21ef89775c5c44779aa39a72dc81a60190f6e

    • SHA512

      7084057d586ec2becb8f39f1cd92078141b644b58b592fb4f484d7fb557d34e33f5f056f4b717e5c85a27ae2ee6d20faef0c8744eca9944213ab9d1f3efb259b

    • SSDEEP

      3072:+esl4+VdlY+01jb5SA5hg9PTEfPa1x+pq0KbuFicLJL:w4+VZQpt5hyPsa1ekiEyL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks