General

  • Target

    JaffaCakes118_9295eeaccc0f4137db281634459f549ee150eacc5ed8f7f4543cf817d0c7821f

  • Size

    166KB

  • Sample

    241230-1mnasazpan

  • MD5

    539833abb6ab4522b20af34153765d54

  • SHA1

    33fe23ff3ec176ae2ea5a36779193572860bc3c7

  • SHA256

    9295eeaccc0f4137db281634459f549ee150eacc5ed8f7f4543cf817d0c7821f

  • SHA512

    3a133007ee350c19f71e6d151c42dddfc5609a068731a04db0323c7759bd44a3b8e4312e379abcbb4fc3807e7d24a17582caf0738e36f7d80d6264deaf645416

  • SSDEEP

    3072:HBoQctVOM7/8wZQvUlM7EF+V2xReSbHNjztUJQ8eHjf:huXLcclWEc2HeSjNjGdeDf

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9295eeaccc0f4137db281634459f549ee150eacc5ed8f7f4543cf817d0c7821f

    • Size

      166KB

    • MD5

      539833abb6ab4522b20af34153765d54

    • SHA1

      33fe23ff3ec176ae2ea5a36779193572860bc3c7

    • SHA256

      9295eeaccc0f4137db281634459f549ee150eacc5ed8f7f4543cf817d0c7821f

    • SHA512

      3a133007ee350c19f71e6d151c42dddfc5609a068731a04db0323c7759bd44a3b8e4312e379abcbb4fc3807e7d24a17582caf0738e36f7d80d6264deaf645416

    • SSDEEP

      3072:HBoQctVOM7/8wZQvUlM7EF+V2xReSbHNjztUJQ8eHjf:huXLcclWEc2HeSjNjGdeDf

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks