General

  • Target

    JaffaCakes118_20b5fd890b43fe894095c5fa2fe0fbd744a29768ff91f3c12398fc2f8841fec3

  • Size

    163KB

  • Sample

    241223-wmfhqawqhs

  • MD5

    e1444f3760ce12237f2d18b56c0a9668

  • SHA1

    645db79b9f4359c9e2cee632fdc39a107d71605a

  • SHA256

    20b5fd890b43fe894095c5fa2fe0fbd744a29768ff91f3c12398fc2f8841fec3

  • SHA512

    e0ac08f3d45350fb23c388fa6e6ef21f4257dc8bc03377f0066ac200cb312093faf7d42a1a0e6fea590d6ec6d673b52186986359fa3502119f3500e3b8416650

  • SSDEEP

    3072:Zar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ds4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_20b5fd890b43fe894095c5fa2fe0fbd744a29768ff91f3c12398fc2f8841fec3

    • Size

      163KB

    • MD5

      e1444f3760ce12237f2d18b56c0a9668

    • SHA1

      645db79b9f4359c9e2cee632fdc39a107d71605a

    • SHA256

      20b5fd890b43fe894095c5fa2fe0fbd744a29768ff91f3c12398fc2f8841fec3

    • SHA512

      e0ac08f3d45350fb23c388fa6e6ef21f4257dc8bc03377f0066ac200cb312093faf7d42a1a0e6fea590d6ec6d673b52186986359fa3502119f3500e3b8416650

    • SSDEEP

      3072:Zar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ds4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks