General

  • Target

    JaffaCakes118_699131e6193a608abc456d60a01353dcfc9328563ab53b03b7aac81468a64079

  • Size

    170KB

  • Sample

    241230-xzf6fsxlax

  • MD5

    202aa57e698e4d2659fc74b8179ff97e

  • SHA1

    eb8ac41e79ff26686f9a42c87169f5478ed03fcc

  • SHA256

    699131e6193a608abc456d60a01353dcfc9328563ab53b03b7aac81468a64079

  • SHA512

    89fead2a766ed08bc012b30badfae16104ba855fcd5bc03c5f4d6c5f622b867bcce5980e38f8b8c9211c735268c829b88680ca14593d9a5018cc6217f552cb54

  • SSDEEP

    3072:qV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:qV/jTe38LiI4Oi75izyn+4lm

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_699131e6193a608abc456d60a01353dcfc9328563ab53b03b7aac81468a64079

    • Size

      170KB

    • MD5

      202aa57e698e4d2659fc74b8179ff97e

    • SHA1

      eb8ac41e79ff26686f9a42c87169f5478ed03fcc

    • SHA256

      699131e6193a608abc456d60a01353dcfc9328563ab53b03b7aac81468a64079

    • SHA512

      89fead2a766ed08bc012b30badfae16104ba855fcd5bc03c5f4d6c5f622b867bcce5980e38f8b8c9211c735268c829b88680ca14593d9a5018cc6217f552cb54

    • SSDEEP

      3072:qV/jTmL3X6TLhgZBxbvRS1ebSi75S5NNZ4n+whXVM9MWdo8erj:qV/jTe38LiI4Oi75izyn+4lm

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks