General

  • Target

    JaffaCakes118_3e5a595a313fa7a4c78da910fce728b4c45d663f46ecf0ee82051528cf4a29b0

  • Size

    160KB

  • Sample

    241230-z9m3vsyrhr

  • MD5

    457a06907e5e537a0024b3162e1eb38d

  • SHA1

    e5ea9264d64114935958e86f46754f0d906bc630

  • SHA256

    3e5a595a313fa7a4c78da910fce728b4c45d663f46ecf0ee82051528cf4a29b0

  • SHA512

    041b4cfd3b0f7607ef46e5e15823221f825283a41923ebb86afbecb53509d21d6995e47a623b935aa0da41d14889d620aab32ecd032445b86cc15496b82948e8

  • SSDEEP

    3072:QNOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:b8mnT7Fmsans1+0Hw7/t

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

185.148.168.240:443

162.216.125.131:2303

193.200.130.178:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3e5a595a313fa7a4c78da910fce728b4c45d663f46ecf0ee82051528cf4a29b0

    • Size

      160KB

    • MD5

      457a06907e5e537a0024b3162e1eb38d

    • SHA1

      e5ea9264d64114935958e86f46754f0d906bc630

    • SHA256

      3e5a595a313fa7a4c78da910fce728b4c45d663f46ecf0ee82051528cf4a29b0

    • SHA512

      041b4cfd3b0f7607ef46e5e15823221f825283a41923ebb86afbecb53509d21d6995e47a623b935aa0da41d14889d620aab32ecd032445b86cc15496b82948e8

    • SSDEEP

      3072:QNOn8cnYCTZouiOyPmE7Zsantih3+0wuFiD3xJaTw1tHr:b8mnT7Fmsans1+0Hw7/t

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks