General

  • Target

    JaffaCakes118_7596f03ee08f5c460fb13932d29354c0d7339bf9d19d13bfc653f517e0710a3f

  • Size

    161KB

  • Sample

    241230-vy1glatkht

  • MD5

    fed78bbebc82c926df0d7bffbc9c906c

  • SHA1

    300c460fbb7ff1706e04f2e657e5bbd84af0c1fd

  • SHA256

    7596f03ee08f5c460fb13932d29354c0d7339bf9d19d13bfc653f517e0710a3f

  • SHA512

    36c344cb744300b897b6112f9900a947b85b00975ada2dfa693fcc9c576b89f9e1e4fcca3b81e5327f08b2afdb7f6614d8bf30f9b42b0e877e7ed72780281412

  • SSDEEP

    3072:ax63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUgCx3:Sa/jkvhSlP/7bg8aFnA3br+

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7596f03ee08f5c460fb13932d29354c0d7339bf9d19d13bfc653f517e0710a3f

    • Size

      161KB

    • MD5

      fed78bbebc82c926df0d7bffbc9c906c

    • SHA1

      300c460fbb7ff1706e04f2e657e5bbd84af0c1fd

    • SHA256

      7596f03ee08f5c460fb13932d29354c0d7339bf9d19d13bfc653f517e0710a3f

    • SHA512

      36c344cb744300b897b6112f9900a947b85b00975ada2dfa693fcc9c576b89f9e1e4fcca3b81e5327f08b2afdb7f6614d8bf30f9b42b0e877e7ed72780281412

    • SSDEEP

      3072:ax63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUgCx3:Sa/jkvhSlP/7bg8aFnA3br+

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks