General

  • Target

    JaffaCakes118_b4a7d54322974b0911e3813b71366c30176fdf253ac397023e9683aca7adc9b6

  • Size

    161KB

  • Sample

    241230-3n8dfsxkcz

  • MD5

    e95cf6f2486ce39ebe25170f631043af

  • SHA1

    1edd7b47155065813a07926ee333675b0b59f0a4

  • SHA256

    b4a7d54322974b0911e3813b71366c30176fdf253ac397023e9683aca7adc9b6

  • SHA512

    9a1fc8b840f7624dcb5c7f165e13be4c46706673383220d5ebf024b55636a9499243d99fe5de27ab7036d9449ceaa0331bf3ace1b30c83b1386a14f60a54949b

  • SSDEEP

    3072:3M63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUJCx3:ca/jkvhSlP/7bg8aFnA3brL

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b4a7d54322974b0911e3813b71366c30176fdf253ac397023e9683aca7adc9b6

    • Size

      161KB

    • MD5

      e95cf6f2486ce39ebe25170f631043af

    • SHA1

      1edd7b47155065813a07926ee333675b0b59f0a4

    • SHA256

      b4a7d54322974b0911e3813b71366c30176fdf253ac397023e9683aca7adc9b6

    • SHA512

      9a1fc8b840f7624dcb5c7f165e13be4c46706673383220d5ebf024b55636a9499243d99fe5de27ab7036d9449ceaa0331bf3ace1b30c83b1386a14f60a54949b

    • SSDEEP

      3072:3M63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUJCx3:ca/jkvhSlP/7bg8aFnA3brL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks