General

  • Target

    JaffaCakes118_bd97efd6c9d177f7124751849fe0dcd64e7104700a27ff9c020eee2480d55432

  • Size

    171KB

  • Sample

    241230-2yj8yavrdz

  • MD5

    00776dc67abad3c18f043650994e06ff

  • SHA1

    5fcaeeb3fe52d2fb2f375966c5574b081385d4d8

  • SHA256

    bd97efd6c9d177f7124751849fe0dcd64e7104700a27ff9c020eee2480d55432

  • SHA512

    07088f4f63b6eca695602c7d02d31f82664dc67c637664d5e75a20dcfe1c5b539eed6fa8e6af228f69282bb29077ab6b4df2a25eeaa765773d00bc0395e3b8eb

  • SSDEEP

    3072:Ei49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:EH9RVaPEmsdHdbQUbd2H3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bd97efd6c9d177f7124751849fe0dcd64e7104700a27ff9c020eee2480d55432

    • Size

      171KB

    • MD5

      00776dc67abad3c18f043650994e06ff

    • SHA1

      5fcaeeb3fe52d2fb2f375966c5574b081385d4d8

    • SHA256

      bd97efd6c9d177f7124751849fe0dcd64e7104700a27ff9c020eee2480d55432

    • SHA512

      07088f4f63b6eca695602c7d02d31f82664dc67c637664d5e75a20dcfe1c5b539eed6fa8e6af228f69282bb29077ab6b4df2a25eeaa765773d00bc0395e3b8eb

    • SSDEEP

      3072:Ei49mEb06hs9BPEmmvt7dNbTqub9Un7WpVJBR13LSoAH7Dk0ZT:EH9RVaPEmsdHdbQUbd2H3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks