General

  • Target

    JaffaCakes118_b307cf3654eee7845f832154becb3179da0c51c5689e227672f73d358789194a

  • Size

    166KB

  • Sample

    241230-3zqyjsxqaz

  • MD5

    6446d7ba1dda644da8256c9b1174744d

  • SHA1

    3a93788167135bc96118babc87fc88012b9f3423

  • SHA256

    b307cf3654eee7845f832154becb3179da0c51c5689e227672f73d358789194a

  • SHA512

    fd53288c4fe15508f217ae5e79c9ea159bb916ff62383461a2dec4e1f731b6bb039c007f66d5ea22e2f5017e0399031ac8ec2347ddc9278dd3c2b8976a67aad1

  • SSDEEP

    3072:QBoQctVOM7/8wZQvUlM7EF+V2xReSbHNjztUJQ8eHjf:kuXLcclWEc2HeSjNjGdeDf

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b307cf3654eee7845f832154becb3179da0c51c5689e227672f73d358789194a

    • Size

      166KB

    • MD5

      6446d7ba1dda644da8256c9b1174744d

    • SHA1

      3a93788167135bc96118babc87fc88012b9f3423

    • SHA256

      b307cf3654eee7845f832154becb3179da0c51c5689e227672f73d358789194a

    • SHA512

      fd53288c4fe15508f217ae5e79c9ea159bb916ff62383461a2dec4e1f731b6bb039c007f66d5ea22e2f5017e0399031ac8ec2347ddc9278dd3c2b8976a67aad1

    • SSDEEP

      3072:QBoQctVOM7/8wZQvUlM7EF+V2xReSbHNjztUJQ8eHjf:kuXLcclWEc2HeSjNjGdeDf

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks