General

  • Target

    JaffaCakes118_3d79a737ab4451415d83a456357eefb9818fa6119fc22efb0108ba7e00ea3a53

  • Size

    161KB

  • Sample

    241230-zj2hkaxqgl

  • MD5

    b38ab0afd9e7a31b797cf74f6ee351a9

  • SHA1

    1d21dd53482b76cc92341e95386b786f0f209a67

  • SHA256

    3d79a737ab4451415d83a456357eefb9818fa6119fc22efb0108ba7e00ea3a53

  • SHA512

    947fe3ca6b929862958ff7d32613b872396d32c61d09cd2ada32c8995496abd2bd7121345673db69848ea4f6cc78733df3c81cc9645f0110bcde3eb029a78629

  • SSDEEP

    3072:Rk2X+QFg3UutDvUvoU8pz6EJEEhu6Tzace9kuaGA81/YXKHML/Yp8AF:LG3rUvoU4JE/Wzan9T7B/CKsL/Yy

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

193.200.130.181:443

95.138.161.226:2303

167.114.113.13:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3d79a737ab4451415d83a456357eefb9818fa6119fc22efb0108ba7e00ea3a53

    • Size

      161KB

    • MD5

      b38ab0afd9e7a31b797cf74f6ee351a9

    • SHA1

      1d21dd53482b76cc92341e95386b786f0f209a67

    • SHA256

      3d79a737ab4451415d83a456357eefb9818fa6119fc22efb0108ba7e00ea3a53

    • SHA512

      947fe3ca6b929862958ff7d32613b872396d32c61d09cd2ada32c8995496abd2bd7121345673db69848ea4f6cc78733df3c81cc9645f0110bcde3eb029a78629

    • SSDEEP

      3072:Rk2X+QFg3UutDvUvoU8pz6EJEEhu6Tzace9kuaGA81/YXKHML/Yp8AF:LG3rUvoU4JE/Wzan9T7B/CKsL/Yy

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks