General

  • Target

    JaffaCakes118_4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de

  • Size

    163KB

  • Sample

    241222-am65sawjgl

  • MD5

    c9118de34eaccd10f23a960e9f33e94a

  • SHA1

    915dc517ec7bee08d0f39d56cee869997eab169e

  • SHA256

    4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de

  • SHA512

    52bc593179b20632068c137cdfa7938c5096d593391b11b48ca41fcd565913850020305d74ef66f844de59a7ddd0ccfed011b650c3a801918e09c8dcb8f6a4f4

  • SSDEEP

    3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de

    • Size

      163KB

    • MD5

      c9118de34eaccd10f23a960e9f33e94a

    • SHA1

      915dc517ec7bee08d0f39d56cee869997eab169e

    • SHA256

      4f2da33b989e77a543e9bde41495266741239e181c822ac41a2c3f0961b092de

    • SHA512

      52bc593179b20632068c137cdfa7938c5096d593391b11b48ca41fcd565913850020305d74ef66f844de59a7ddd0ccfed011b650c3a801918e09c8dcb8f6a4f4

    • SSDEEP

      3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks