General

  • Target

    JaffaCakes118_5503531f37099168d1175bc1118a2b9c93f0a05a0e66bb29c69984d5320580d7

  • Size

    163KB

  • Sample

    241222-ja9jtayqht

  • MD5

    3b7602890ebc3b3a6423a2c3ebef4bcf

  • SHA1

    a42375baa58cd0e4707bab51c086339424f673ac

  • SHA256

    5503531f37099168d1175bc1118a2b9c93f0a05a0e66bb29c69984d5320580d7

  • SHA512

    3552ef542a16ec5b9dfa201b8022919cbeff282c5efc377b439eeb25999be5530e4af659b12f429ee09c7f846e326f32e63d4b1244d16ca7aff0a0a36ccdb593

  • SSDEEP

    3072:5ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:js4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5503531f37099168d1175bc1118a2b9c93f0a05a0e66bb29c69984d5320580d7

    • Size

      163KB

    • MD5

      3b7602890ebc3b3a6423a2c3ebef4bcf

    • SHA1

      a42375baa58cd0e4707bab51c086339424f673ac

    • SHA256

      5503531f37099168d1175bc1118a2b9c93f0a05a0e66bb29c69984d5320580d7

    • SHA512

      3552ef542a16ec5b9dfa201b8022919cbeff282c5efc377b439eeb25999be5530e4af659b12f429ee09c7f846e326f32e63d4b1244d16ca7aff0a0a36ccdb593

    • SSDEEP

      3072:5ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:js4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks