General

  • Target

    JaffaCakes118_c190568515db1b16dd199e77308dd615c687aca87588ee6174650e4ea116f633

  • Size

    161KB

  • Sample

    241230-f114ksyrby

  • MD5

    a826998d2f52a8f3bb1c34405d3ae4b8

  • SHA1

    dba7df95549a217bed6d37a45bf3d8950b9d3ab7

  • SHA256

    c190568515db1b16dd199e77308dd615c687aca87588ee6174650e4ea116f633

  • SHA512

    c44650d1adacb747d6eaa063842384897157ecb42ae15f7b99c4503be1be800225751679c25dde229eb3fa4d53aeb257a02f02a71977fb22192fb723251ae90e

  • SSDEEP

    3072:wm63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUZCx3:7a/jkvhSlP/7bg8aFnA3brH

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c190568515db1b16dd199e77308dd615c687aca87588ee6174650e4ea116f633

    • Size

      161KB

    • MD5

      a826998d2f52a8f3bb1c34405d3ae4b8

    • SHA1

      dba7df95549a217bed6d37a45bf3d8950b9d3ab7

    • SHA256

      c190568515db1b16dd199e77308dd615c687aca87588ee6174650e4ea116f633

    • SHA512

      c44650d1adacb747d6eaa063842384897157ecb42ae15f7b99c4503be1be800225751679c25dde229eb3fa4d53aeb257a02f02a71977fb22192fb723251ae90e

    • SSDEEP

      3072:wm63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUZCx3:7a/jkvhSlP/7bg8aFnA3brH

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks