General

  • Target

    JaffaCakes118_bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258

  • Size

    160KB

  • Sample

    241230-2y24ravrfx

  • MD5

    af967109cf55e70dd68147f4a917d3f0

  • SHA1

    c0741a04a19d30b9222d95c7528cf4129ca0249c

  • SHA256

    bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258

  • SHA512

    45e9f9aa99bdf5256ec4f684ab2f9fb86d0b86f03f64fb03c2151a9d3608ae8d3aa614a0761422512ae5ec69fe52e1dd68fda6552a477a932fb3bb0b601a27a8

  • SSDEEP

    3072:whOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:n8mnT7Fmsans1+0Hw7/t

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

185.148.168.240:443

162.216.125.131:2303

193.200.130.178:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258

    • Size

      160KB

    • MD5

      af967109cf55e70dd68147f4a917d3f0

    • SHA1

      c0741a04a19d30b9222d95c7528cf4129ca0249c

    • SHA256

      bd8155c7264b7204607ac65778237f2541df075679b32c9833dfbe7af0826258

    • SHA512

      45e9f9aa99bdf5256ec4f684ab2f9fb86d0b86f03f64fb03c2151a9d3608ae8d3aa614a0761422512ae5ec69fe52e1dd68fda6552a477a932fb3bb0b601a27a8

    • SSDEEP

      3072:whOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:n8mnT7Fmsans1+0Hw7/t

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks