General

  • Target

    JaffaCakes118_6469f6ad95c21c979767aa667ba128af9b49379e5cb7bf9220adc0172d04df08

  • Size

    164KB

  • Sample

    241222-hseaysykew

  • MD5

    084e147d2bd8db2b7cfd02facfed7518

  • SHA1

    a11eb49f880396e881c4efb3ebf012e00710a30b

  • SHA256

    6469f6ad95c21c979767aa667ba128af9b49379e5cb7bf9220adc0172d04df08

  • SHA512

    0bf57c1348871df7b132dd84f41ed18bb77983e14e7bf7a2aece297b3f6d18d45e1bc08645fd6672417008d04f4a2e5e5349e6d9d3794171a26ad3c3b6abf1a6

  • SSDEEP

    3072:uBefihU8fQ2Sob/xg+eNV1A1I3aiI8i3GdVAzuECtNjP3/3ioP7y11a0E:uBefiv/12+2A1AIpFzxCtNjHSoPm11J

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.123.40.54:443

82.209.17.209:8172

180.250.21.2:13721

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6469f6ad95c21c979767aa667ba128af9b49379e5cb7bf9220adc0172d04df08

    • Size

      164KB

    • MD5

      084e147d2bd8db2b7cfd02facfed7518

    • SHA1

      a11eb49f880396e881c4efb3ebf012e00710a30b

    • SHA256

      6469f6ad95c21c979767aa667ba128af9b49379e5cb7bf9220adc0172d04df08

    • SHA512

      0bf57c1348871df7b132dd84f41ed18bb77983e14e7bf7a2aece297b3f6d18d45e1bc08645fd6672417008d04f4a2e5e5349e6d9d3794171a26ad3c3b6abf1a6

    • SSDEEP

      3072:uBefihU8fQ2Sob/xg+eNV1A1I3aiI8i3GdVAzuECtNjP3/3ioP7y11a0E:uBefiv/12+2A1AIpFzxCtNjHSoPm11J

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks