General

  • Target

    JaffaCakes118_701e7ea04a0250ea55ad8aa70e6f137f3c9c115fba8fc2afc7b5f60ad23cf6a8

  • Size

    163KB

  • Sample

    241223-1kf4pasmej

  • MD5

    4d1c31960acb9ca8b7527ffb3002c98e

  • SHA1

    3c9857284c830a00e4210e9452d3b24d840af8e0

  • SHA256

    701e7ea04a0250ea55ad8aa70e6f137f3c9c115fba8fc2afc7b5f60ad23cf6a8

  • SHA512

    7c77be39a1caaa63fa9c3a703c01af5d239be9ecf6c181be4a95f6b08969a05e4ea3851f756345fade81e3a33547c13ed1c4d98d6cfe2c69ebc98dee125cb0cf

  • SSDEEP

    3072:Tar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Vs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_701e7ea04a0250ea55ad8aa70e6f137f3c9c115fba8fc2afc7b5f60ad23cf6a8

    • Size

      163KB

    • MD5

      4d1c31960acb9ca8b7527ffb3002c98e

    • SHA1

      3c9857284c830a00e4210e9452d3b24d840af8e0

    • SHA256

      701e7ea04a0250ea55ad8aa70e6f137f3c9c115fba8fc2afc7b5f60ad23cf6a8

    • SHA512

      7c77be39a1caaa63fa9c3a703c01af5d239be9ecf6c181be4a95f6b08969a05e4ea3851f756345fade81e3a33547c13ed1c4d98d6cfe2c69ebc98dee125cb0cf

    • SSDEEP

      3072:Tar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Vs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks