General

  • Target

    JaffaCakes118_3b463b585f6ac8414109c97244b906037737863e737ba47e90ae5e3b29fcccc9

  • Size

    161KB

  • Sample

    241230-zcnywsxnan

  • MD5

    a539abbd6f8e7005584b6015471c8b1f

  • SHA1

    a8989a95ebb55be6ee2a1ea2344826318b2a9883

  • SHA256

    3b463b585f6ac8414109c97244b906037737863e737ba47e90ae5e3b29fcccc9

  • SHA512

    d29909fbd72f58426eb1e0a050101d3b365e17546b0b73348ce48eadccb3c2b1c5071fdb6cb61108b6c0a0d3aca76ffadcfeeb70225cab5ac92106f339830edf

  • SSDEEP

    3072:Hm63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUZCx3:Ga/jkvhSlP/7bg8aFnA3brH

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3b463b585f6ac8414109c97244b906037737863e737ba47e90ae5e3b29fcccc9

    • Size

      161KB

    • MD5

      a539abbd6f8e7005584b6015471c8b1f

    • SHA1

      a8989a95ebb55be6ee2a1ea2344826318b2a9883

    • SHA256

      3b463b585f6ac8414109c97244b906037737863e737ba47e90ae5e3b29fcccc9

    • SHA512

      d29909fbd72f58426eb1e0a050101d3b365e17546b0b73348ce48eadccb3c2b1c5071fdb6cb61108b6c0a0d3aca76ffadcfeeb70225cab5ac92106f339830edf

    • SSDEEP

      3072:Hm63mpMBf4M8+pwhukvhU7fWaX/77/DZgTmbg+MGaFplA33VBrUZCx3:Ga/jkvhSlP/7bg8aFnA3brH

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks