General

  • Target

    JaffaCakes118_5f1217c38a6833b7e9f7fd24d76ef3e9766c1aa6a93da8ded6eba749b8463b34

  • Size

    163KB

  • Sample

    241222-1h5n9szqar

  • MD5

    c3a87d0a9d648065593a4954b8933ce7

  • SHA1

    b7c7aef3b0ee130f13c66d173d30ea8f4692e680

  • SHA256

    5f1217c38a6833b7e9f7fd24d76ef3e9766c1aa6a93da8ded6eba749b8463b34

  • SHA512

    f35ff4608282a4748c24812ee385d3b7fb1b17724dfde8d672f4f1d200c474746de7e5fcec29ffa4fae4b0e80e90ee497f80aeba5cdceb57736fe2d638e91b6d

  • SSDEEP

    3072:lar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Hs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5f1217c38a6833b7e9f7fd24d76ef3e9766c1aa6a93da8ded6eba749b8463b34

    • Size

      163KB

    • MD5

      c3a87d0a9d648065593a4954b8933ce7

    • SHA1

      b7c7aef3b0ee130f13c66d173d30ea8f4692e680

    • SHA256

      5f1217c38a6833b7e9f7fd24d76ef3e9766c1aa6a93da8ded6eba749b8463b34

    • SHA512

      f35ff4608282a4748c24812ee385d3b7fb1b17724dfde8d672f4f1d200c474746de7e5fcec29ffa4fae4b0e80e90ee497f80aeba5cdceb57736fe2d638e91b6d

    • SSDEEP

      3072:lar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Hs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks