General

  • Target

    JaffaCakes118_c76f57be7ee78efcb4cd996ef066fd97f60eafa2d2283c0736650d6832c61398

  • Size

    163KB

  • Sample

    241222-kt88tsskfn

  • MD5

    fa5cd274fd7006aaf047c664db81c49f

  • SHA1

    ff4f1da3afb51c9de1b8390d1e72d4cddf21b583

  • SHA256

    c76f57be7ee78efcb4cd996ef066fd97f60eafa2d2283c0736650d6832c61398

  • SHA512

    555c7586ae5491ef230547d0d7faf06b248ac5ed5b5081574a0bf0ce787447ce7b30d16cbd5e946b12e18a42450468af831eeec16784d8381c4748f269186f53

  • SSDEEP

    3072:aar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:cs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c76f57be7ee78efcb4cd996ef066fd97f60eafa2d2283c0736650d6832c61398

    • Size

      163KB

    • MD5

      fa5cd274fd7006aaf047c664db81c49f

    • SHA1

      ff4f1da3afb51c9de1b8390d1e72d4cddf21b583

    • SHA256

      c76f57be7ee78efcb4cd996ef066fd97f60eafa2d2283c0736650d6832c61398

    • SHA512

      555c7586ae5491ef230547d0d7faf06b248ac5ed5b5081574a0bf0ce787447ce7b30d16cbd5e946b12e18a42450468af831eeec16784d8381c4748f269186f53

    • SSDEEP

      3072:aar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:cs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks