General

  • Target

    JaffaCakes118_165c8ffbee809aa4792fb1fbcb0ceea9c84680f919c8051a80387f86db93377e

  • Size

    166KB

  • Sample

    241230-zxp2paymgl

  • MD5

    c9ec64700515717967150ff51f614abc

  • SHA1

    d18b4fd6ad027701dda44428f00336bd7d9db9b7

  • SHA256

    165c8ffbee809aa4792fb1fbcb0ceea9c84680f919c8051a80387f86db93377e

  • SHA512

    ad27bc806294612fdb9313508b2097dfc498977d02b0a366a460e096a1f7a4f2673cd6b9457f07bb2f818b2309fb1e531983fb8dfde6a20b283d92d8987c87aa

  • SSDEEP

    3072:/BoQctVOM7/8wZQvUlM7EF+V2xReSbHNjztUJQ8eHCb:puXLcclWEc2HeSjNjGdeib

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

131.100.24.202:443

193.160.214.95:4125

67.43.4.76:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_165c8ffbee809aa4792fb1fbcb0ceea9c84680f919c8051a80387f86db93377e

    • Size

      166KB

    • MD5

      c9ec64700515717967150ff51f614abc

    • SHA1

      d18b4fd6ad027701dda44428f00336bd7d9db9b7

    • SHA256

      165c8ffbee809aa4792fb1fbcb0ceea9c84680f919c8051a80387f86db93377e

    • SHA512

      ad27bc806294612fdb9313508b2097dfc498977d02b0a366a460e096a1f7a4f2673cd6b9457f07bb2f818b2309fb1e531983fb8dfde6a20b283d92d8987c87aa

    • SSDEEP

      3072:/BoQctVOM7/8wZQvUlM7EF+V2xReSbHNjztUJQ8eHCb:puXLcclWEc2HeSjNjGdeib

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks