General

  • Target

    JaffaCakes118_24ce04b568130ebc65ecb0000e4c8e33c628aad0dcc57e541c52298f748af787

  • Size

    161KB

  • Sample

    241230-f3encsyres

  • MD5

    35bc98ff24b3dd953a570a7d38d2e27b

  • SHA1

    482f0bc0e38c125261a58dc8a5aece6a452b5cb8

  • SHA256

    24ce04b568130ebc65ecb0000e4c8e33c628aad0dcc57e541c52298f748af787

  • SHA512

    7f5f4404ac397898f95769f86dee283579c66f6545431a4b9b709701029949f0912684c07f282988c2c2a71cb83b7893823703f050a9b40648df1e6ecec19f43

  • SSDEEP

    3072:km63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUZCx3:na/jkvhSlP/7bg8aFnA3brH

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_24ce04b568130ebc65ecb0000e4c8e33c628aad0dcc57e541c52298f748af787

    • Size

      161KB

    • MD5

      35bc98ff24b3dd953a570a7d38d2e27b

    • SHA1

      482f0bc0e38c125261a58dc8a5aece6a452b5cb8

    • SHA256

      24ce04b568130ebc65ecb0000e4c8e33c628aad0dcc57e541c52298f748af787

    • SHA512

      7f5f4404ac397898f95769f86dee283579c66f6545431a4b9b709701029949f0912684c07f282988c2c2a71cb83b7893823703f050a9b40648df1e6ecec19f43

    • SSDEEP

      3072:km63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUZCx3:na/jkvhSlP/7bg8aFnA3brH

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks