General

  • Target

    JaffaCakes118_732b1964534be5eb1563bf9e95cb2a619d1b0839df9b0fe4724014bff922e51e

  • Size

    163KB

  • Sample

    241222-b6klkayjev

  • MD5

    113fb0f3985a1b9a4a591b660de22408

  • SHA1

    a2898b4893e6e8e4500b93ebcc768d6509a68015

  • SHA256

    732b1964534be5eb1563bf9e95cb2a619d1b0839df9b0fe4724014bff922e51e

  • SHA512

    3ce263c72586c0586e0246ede90cb47aaa988bbf1811331bdece84244b6f7c8da917570bd6e6104ffc41f237439d031ac45e788610cd41ff3636d2ced1845306

  • SSDEEP

    3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_732b1964534be5eb1563bf9e95cb2a619d1b0839df9b0fe4724014bff922e51e

    • Size

      163KB

    • MD5

      113fb0f3985a1b9a4a591b660de22408

    • SHA1

      a2898b4893e6e8e4500b93ebcc768d6509a68015

    • SHA256

      732b1964534be5eb1563bf9e95cb2a619d1b0839df9b0fe4724014bff922e51e

    • SHA512

      3ce263c72586c0586e0246ede90cb47aaa988bbf1811331bdece84244b6f7c8da917570bd6e6104ffc41f237439d031ac45e788610cd41ff3636d2ced1845306

    • SSDEEP

      3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks