General

  • Target

    JaffaCakes118_ff29d923f35765abcb87774e2055919b5f7f61047d2e858aef19aa4e10f79248

  • Size

    163KB

  • Sample

    241223-2wqb6stqas

  • MD5

    81bf3d0c2d2f3e4b0e110628c175573e

  • SHA1

    7718da19a24bc1261fc530149a7a30d4d1861f05

  • SHA256

    ff29d923f35765abcb87774e2055919b5f7f61047d2e858aef19aa4e10f79248

  • SHA512

    5089890ddd4106659f440a3090243434cfdaf098758a257aef085723dba81c5ddd85403b22dab0dd585dc0995a9698d190848085e8bc32252b6b3c3dc50227af

  • SSDEEP

    3072:b9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:b9F6rQXvFczvYpQP

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ff29d923f35765abcb87774e2055919b5f7f61047d2e858aef19aa4e10f79248

    • Size

      163KB

    • MD5

      81bf3d0c2d2f3e4b0e110628c175573e

    • SHA1

      7718da19a24bc1261fc530149a7a30d4d1861f05

    • SHA256

      ff29d923f35765abcb87774e2055919b5f7f61047d2e858aef19aa4e10f79248

    • SHA512

      5089890ddd4106659f440a3090243434cfdaf098758a257aef085723dba81c5ddd85403b22dab0dd585dc0995a9698d190848085e8bc32252b6b3c3dc50227af

    • SSDEEP

      3072:b9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:b9F6rQXvFczvYpQP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks