General

  • Target

    JaffaCakes118_852f76fbef23cde0af81e685de0ded9ea29a60acca3a6758ecf6e128f4c7cb92

  • Size

    166KB

  • Sample

    241230-zqk46aykbn

  • MD5

    f0938a6bca1142c722f1f206bac1dcfb

  • SHA1

    f35ba75aabee7736ae89d7cfbddf2d92f79ba544

  • SHA256

    852f76fbef23cde0af81e685de0ded9ea29a60acca3a6758ecf6e128f4c7cb92

  • SHA512

    efdd445f71c6ef8817aefe5374d6b55a1faf2c436d45df9030860d318cd0d8c5b7db1790f41a087484478db987e50895dfc1f00d29107ed92d0749390ba68bda

  • SSDEEP

    3072:5BoQctVOM7/8wZQvUlM7EF+V2xReSbHNjztUJQ8eHC/:nuXLcclWEc2HeSjNjGdei/

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_852f76fbef23cde0af81e685de0ded9ea29a60acca3a6758ecf6e128f4c7cb92

    • Size

      166KB

    • MD5

      f0938a6bca1142c722f1f206bac1dcfb

    • SHA1

      f35ba75aabee7736ae89d7cfbddf2d92f79ba544

    • SHA256

      852f76fbef23cde0af81e685de0ded9ea29a60acca3a6758ecf6e128f4c7cb92

    • SHA512

      efdd445f71c6ef8817aefe5374d6b55a1faf2c436d45df9030860d318cd0d8c5b7db1790f41a087484478db987e50895dfc1f00d29107ed92d0749390ba68bda

    • SSDEEP

      3072:5BoQctVOM7/8wZQvUlM7EF+V2xReSbHNjztUJQ8eHC/:nuXLcclWEc2HeSjNjGdei/

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks