General

  • Target

    JaffaCakes118_c7bbb1753841af407e5271c23d0ef8e41570715429b04e5687d42169bb6e3abc

  • Size

    163KB

  • Sample

    241222-ds8gks1nez

  • MD5

    dc7d0e00c6ecf4936552523fa83747bc

  • SHA1

    2d7df608f5a41cad4a6cd263b4af7a283d44c487

  • SHA256

    c7bbb1753841af407e5271c23d0ef8e41570715429b04e5687d42169bb6e3abc

  • SHA512

    1339c50c4bc4c9ee52a46c85ccc10a7c30a77c094fd90ca0850b07e0ae448e702f8676ac83269b2bfbbbd5fdc58ac5c484b18dbc4f09121c38863d23348a2f0a

  • SSDEEP

    3072:2ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:ws4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c7bbb1753841af407e5271c23d0ef8e41570715429b04e5687d42169bb6e3abc

    • Size

      163KB

    • MD5

      dc7d0e00c6ecf4936552523fa83747bc

    • SHA1

      2d7df608f5a41cad4a6cd263b4af7a283d44c487

    • SHA256

      c7bbb1753841af407e5271c23d0ef8e41570715429b04e5687d42169bb6e3abc

    • SHA512

      1339c50c4bc4c9ee52a46c85ccc10a7c30a77c094fd90ca0850b07e0ae448e702f8676ac83269b2bfbbbd5fdc58ac5c484b18dbc4f09121c38863d23348a2f0a

    • SSDEEP

      3072:2ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:ws4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks