General

  • Target

    JaffaCakes118_5118eaff349c610511971c5a6b70fceedaf2f6f1b718c626257dc7969e838a9d

  • Size

    167KB

  • Sample

    241230-1wed8s1jan

  • MD5

    ce166959a165b68cb251debcc8d089ed

  • SHA1

    962549163a36cd7d222898a1d13c947155e406c4

  • SHA256

    5118eaff349c610511971c5a6b70fceedaf2f6f1b718c626257dc7969e838a9d

  • SHA512

    56c6d1141353e273f8c4529fd3df1cd2824375f707b9174188c88cb2216f43f55352af9f6d44470af94cbf855edcff13f5e1b71fcc9b815a319359f74bebefc9

  • SSDEEP

    3072:WjG/TPp+AgPbdXnx6ZBfPG6+Xo4Y63F35oJq3Kco08AQazELZn+1qPrx6/idiTj:lERMVPG6+Y63HoG1QawL40Prx6KkTj

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5118eaff349c610511971c5a6b70fceedaf2f6f1b718c626257dc7969e838a9d

    • Size

      167KB

    • MD5

      ce166959a165b68cb251debcc8d089ed

    • SHA1

      962549163a36cd7d222898a1d13c947155e406c4

    • SHA256

      5118eaff349c610511971c5a6b70fceedaf2f6f1b718c626257dc7969e838a9d

    • SHA512

      56c6d1141353e273f8c4529fd3df1cd2824375f707b9174188c88cb2216f43f55352af9f6d44470af94cbf855edcff13f5e1b71fcc9b815a319359f74bebefc9

    • SSDEEP

      3072:WjG/TPp+AgPbdXnx6ZBfPG6+Xo4Y63F35oJq3Kco08AQazELZn+1qPrx6/idiTj:lERMVPG6+Y63HoG1QawL40Prx6KkTj

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks