General

  • Target

    JaffaCakes118_6f078d76b928cfecb92e5069fadb485ad9fd69baab233451e3cc47b26a57050a

  • Size

    163KB

  • Sample

    241223-xavybaxmc1

  • MD5

    c2b640a5b2861f5017404f7adec70b0a

  • SHA1

    b3aa1ffe16b134858128b0f7fad907aaded98702

  • SHA256

    6f078d76b928cfecb92e5069fadb485ad9fd69baab233451e3cc47b26a57050a

  • SHA512

    4c6f38b158e84ca27852a68158530f36d16610fc161e644d892fa2daee06002030d88be2089df778e2213a8453c47b1231d6812e0cf567a124b0bc2e8f6bbd16

  • SSDEEP

    3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6f078d76b928cfecb92e5069fadb485ad9fd69baab233451e3cc47b26a57050a

    • Size

      163KB

    • MD5

      c2b640a5b2861f5017404f7adec70b0a

    • SHA1

      b3aa1ffe16b134858128b0f7fad907aaded98702

    • SHA256

      6f078d76b928cfecb92e5069fadb485ad9fd69baab233451e3cc47b26a57050a

    • SHA512

      4c6f38b158e84ca27852a68158530f36d16610fc161e644d892fa2daee06002030d88be2089df778e2213a8453c47b1231d6812e0cf567a124b0bc2e8f6bbd16

    • SSDEEP

      3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks