General

  • Target

    JaffaCakes118_b5c91b3ddfcd398da32f6ecb3a7820082481ef53c4088bd81b1ef047b5b8f7d9

  • Size

    163KB

  • Sample

    241223-xbm9vsxmez

  • MD5

    530b2282f125b2093e814b1da566adf9

  • SHA1

    b211caaad55e53b059b9fa2cd6ceb4fe03fa32d6

  • SHA256

    b5c91b3ddfcd398da32f6ecb3a7820082481ef53c4088bd81b1ef047b5b8f7d9

  • SHA512

    457263e58ef5724ebb40053422e663e2a37b132e2725010fa863c9f9574a763e9d799e9815d72715c94e4ce7bf51dbb31a8a5fcdc30710dcaba92b1d01b33f68

  • SSDEEP

    3072:var6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Js4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_b5c91b3ddfcd398da32f6ecb3a7820082481ef53c4088bd81b1ef047b5b8f7d9

    • Size

      163KB

    • MD5

      530b2282f125b2093e814b1da566adf9

    • SHA1

      b211caaad55e53b059b9fa2cd6ceb4fe03fa32d6

    • SHA256

      b5c91b3ddfcd398da32f6ecb3a7820082481ef53c4088bd81b1ef047b5b8f7d9

    • SHA512

      457263e58ef5724ebb40053422e663e2a37b132e2725010fa863c9f9574a763e9d799e9815d72715c94e4ce7bf51dbb31a8a5fcdc30710dcaba92b1d01b33f68

    • SSDEEP

      3072:var6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Js4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks