General

  • Target

    JaffaCakes118_18a972ad00c5ab30806b0e573b02b494badc2b486533cd7b2a79aa7963dbb46a

  • Size

    167KB

  • Sample

    241230-fd4k7aymbp

  • MD5

    e708fe664ed66a4ff48d0dd91d713f13

  • SHA1

    cf8694fafea33f9cecdc04d62a0b29412bc57d98

  • SHA256

    18a972ad00c5ab30806b0e573b02b494badc2b486533cd7b2a79aa7963dbb46a

  • SHA512

    f24544d8193e5564c5d689a264ec7e4fe8db90a1977e8715dcc356576a30324cd3482397364afd8dc378b77dc5bd54578b2d926f88b9fe05fd8ac38f5cdf6c59

  • SSDEEP

    3072:leG/TPp+AgPbdXnx6ZBfPG6+Xo4Y63F35oJq3Kco08AQazELZn+1qPrx6/idDf:vERMVPG6+Y63HoG1QawL40Prx6KRf

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_18a972ad00c5ab30806b0e573b02b494badc2b486533cd7b2a79aa7963dbb46a

    • Size

      167KB

    • MD5

      e708fe664ed66a4ff48d0dd91d713f13

    • SHA1

      cf8694fafea33f9cecdc04d62a0b29412bc57d98

    • SHA256

      18a972ad00c5ab30806b0e573b02b494badc2b486533cd7b2a79aa7963dbb46a

    • SHA512

      f24544d8193e5564c5d689a264ec7e4fe8db90a1977e8715dcc356576a30324cd3482397364afd8dc378b77dc5bd54578b2d926f88b9fe05fd8ac38f5cdf6c59

    • SSDEEP

      3072:leG/TPp+AgPbdXnx6ZBfPG6+Xo4Y63F35oJq3Kco08AQazELZn+1qPrx6/idDf:vERMVPG6+Y63HoG1QawL40Prx6KRf

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks