General

  • Target

    JaffaCakes118_516e654902cb10ffe99e38c331d33000440071f1f5aa26f048051473777d37e4

  • Size

    163KB

  • Sample

    241223-vf2xpsvqhr

  • MD5

    53f25b7dbda50f6ce035864ed64870f6

  • SHA1

    dffb63b58438a5434ec248bf08d238b070339457

  • SHA256

    516e654902cb10ffe99e38c331d33000440071f1f5aa26f048051473777d37e4

  • SHA512

    4c4a02f471c28b21f42b3be324a4680edb292dfca323802ea3b603438d33b2c98e8a31c73be5dd793b66991853da5b8b253e27f7952011469145627ef4b564fd

  • SSDEEP

    3072:8ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:es4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_516e654902cb10ffe99e38c331d33000440071f1f5aa26f048051473777d37e4

    • Size

      163KB

    • MD5

      53f25b7dbda50f6ce035864ed64870f6

    • SHA1

      dffb63b58438a5434ec248bf08d238b070339457

    • SHA256

      516e654902cb10ffe99e38c331d33000440071f1f5aa26f048051473777d37e4

    • SHA512

      4c4a02f471c28b21f42b3be324a4680edb292dfca323802ea3b603438d33b2c98e8a31c73be5dd793b66991853da5b8b253e27f7952011469145627ef4b564fd

    • SSDEEP

      3072:8ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:es4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks