General

  • Target

    JaffaCakes118_62249fb9e178015555b2856d727cfa8b5b53991f4c217b51b56211673fe2e16e

  • Size

    163KB

  • Sample

    241222-a6yyhswqgl

  • MD5

    f4155920b46a58ba1d98791f2fff55aa

  • SHA1

    0adf8a5063026ffd5e12429e559a847f84853a97

  • SHA256

    62249fb9e178015555b2856d727cfa8b5b53991f4c217b51b56211673fe2e16e

  • SHA512

    8eed1fe5d7b004d2e3e2c5a59ffd5198a6951ab4437d21634264d61f6a88fdc0ca394fed2421910dd87608662a900bd6a30daae9b51e16f9b2d18c4ea60ba52e

  • SSDEEP

    3072:par6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ts4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_62249fb9e178015555b2856d727cfa8b5b53991f4c217b51b56211673fe2e16e

    • Size

      163KB

    • MD5

      f4155920b46a58ba1d98791f2fff55aa

    • SHA1

      0adf8a5063026ffd5e12429e559a847f84853a97

    • SHA256

      62249fb9e178015555b2856d727cfa8b5b53991f4c217b51b56211673fe2e16e

    • SHA512

      8eed1fe5d7b004d2e3e2c5a59ffd5198a6951ab4437d21634264d61f6a88fdc0ca394fed2421910dd87608662a900bd6a30daae9b51e16f9b2d18c4ea60ba52e

    • SSDEEP

      3072:par6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ts4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks