General

  • Target

    JaffaCakes118_84d0ee979629ac71854886b2e520d9018b0ac96d121cb50c799561a92bd6dd5b

  • Size

    163KB

  • Sample

    241222-har44axqdn

  • MD5

    984565b710ee2c0a29e24e4eb09eef76

  • SHA1

    2fee07c235b546daa7d76c212b3fea2594f41e8f

  • SHA256

    84d0ee979629ac71854886b2e520d9018b0ac96d121cb50c799561a92bd6dd5b

  • SHA512

    8da0bf556d00bf3d9d53b0adb54a775559cfa611341587d59de789ed727fba95b1d0d47602d9b271f68271fcd2870773c2fb503ae33764faa45a3ba6a41f7124

  • SSDEEP

    3072:lar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Hs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_84d0ee979629ac71854886b2e520d9018b0ac96d121cb50c799561a92bd6dd5b

    • Size

      163KB

    • MD5

      984565b710ee2c0a29e24e4eb09eef76

    • SHA1

      2fee07c235b546daa7d76c212b3fea2594f41e8f

    • SHA256

      84d0ee979629ac71854886b2e520d9018b0ac96d121cb50c799561a92bd6dd5b

    • SHA512

      8da0bf556d00bf3d9d53b0adb54a775559cfa611341587d59de789ed727fba95b1d0d47602d9b271f68271fcd2870773c2fb503ae33764faa45a3ba6a41f7124

    • SSDEEP

      3072:lar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Hs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks