General

  • Target

    JaffaCakes118_1f8773bcb8bf1385a6a203648c0fc1952a39ccbb65d87192a287595a8428713a

  • Size

    161KB

  • Sample

    241230-ybtbjsvqap

  • MD5

    397f80c044bf521663f406a61e2c3468

  • SHA1

    91ea5f3eb0c62cdbc198f26aa08307d304481c05

  • SHA256

    1f8773bcb8bf1385a6a203648c0fc1952a39ccbb65d87192a287595a8428713a

  • SHA512

    1b352af59223642cbe3e8460054ce98c3364fa983534a000e294e1288c9a82a3698341d6e6878831d0b0e3da69d7260502a7906a372f68b339e8112441e93a33

  • SSDEEP

    3072:ZZ63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrU4Cx3:Xa/jkvhSlP/7bg8aFnA3brC

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1f8773bcb8bf1385a6a203648c0fc1952a39ccbb65d87192a287595a8428713a

    • Size

      161KB

    • MD5

      397f80c044bf521663f406a61e2c3468

    • SHA1

      91ea5f3eb0c62cdbc198f26aa08307d304481c05

    • SHA256

      1f8773bcb8bf1385a6a203648c0fc1952a39ccbb65d87192a287595a8428713a

    • SHA512

      1b352af59223642cbe3e8460054ce98c3364fa983534a000e294e1288c9a82a3698341d6e6878831d0b0e3da69d7260502a7906a372f68b339e8112441e93a33

    • SSDEEP

      3072:ZZ63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrU4Cx3:Xa/jkvhSlP/7bg8aFnA3brC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks