General

  • Target

    JaffaCakes118_af52197bdc91f36bc905e9e3063a1ead96a6201220413bd1898b0a0d509cb800

  • Size

    166KB

  • Sample

    241230-bqjdkatjgl

  • MD5

    aa4cbd35f6579e9cb0a11a3b491af8fc

  • SHA1

    da679832e986308a92407d369591577768c58c39

  • SHA256

    af52197bdc91f36bc905e9e3063a1ead96a6201220413bd1898b0a0d509cb800

  • SHA512

    cd86ce649187599f9a5acc519e37783e625e1635dcb941a6743b1a87c907ea1e822be5602737dce52c9c3799290b866905785814af2fd1c89dc4446d2fb2e926

  • SSDEEP

    3072:wzuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:wz0czbty9uiaJlHE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_af52197bdc91f36bc905e9e3063a1ead96a6201220413bd1898b0a0d509cb800

    • Size

      166KB

    • MD5

      aa4cbd35f6579e9cb0a11a3b491af8fc

    • SHA1

      da679832e986308a92407d369591577768c58c39

    • SHA256

      af52197bdc91f36bc905e9e3063a1ead96a6201220413bd1898b0a0d509cb800

    • SHA512

      cd86ce649187599f9a5acc519e37783e625e1635dcb941a6743b1a87c907ea1e822be5602737dce52c9c3799290b866905785814af2fd1c89dc4446d2fb2e926

    • SSDEEP

      3072:wzuFbQtsYQcjxanytIp92/l1iPPqs1/whG68DaHrnpDZ+eE:wz0czbty9uiaJlHE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks