General

  • Target

    JaffaCakes118_f21641261a77343c1b365c1ce86038a3000ca4860e34b07d821596b48de80180

  • Size

    163KB

  • Sample

    241223-xy9rdaykdl

  • MD5

    036d5170f9b252f9d5339a104dbb2330

  • SHA1

    0b664e24c2f7d7dd60fa237de678155cc1f50202

  • SHA256

    f21641261a77343c1b365c1ce86038a3000ca4860e34b07d821596b48de80180

  • SHA512

    07d9f6c2b01cfd2c22b776ce768c44332b56759e99ae63fedfa490f54a1e9f2a4736b22ccb708e1e5dd4ecf1ec63de4cc00e45a423c72b236b998a25efa06599

  • SSDEEP

    3072:5ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:js4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f21641261a77343c1b365c1ce86038a3000ca4860e34b07d821596b48de80180

    • Size

      163KB

    • MD5

      036d5170f9b252f9d5339a104dbb2330

    • SHA1

      0b664e24c2f7d7dd60fa237de678155cc1f50202

    • SHA256

      f21641261a77343c1b365c1ce86038a3000ca4860e34b07d821596b48de80180

    • SHA512

      07d9f6c2b01cfd2c22b776ce768c44332b56759e99ae63fedfa490f54a1e9f2a4736b22ccb708e1e5dd4ecf1ec63de4cc00e45a423c72b236b998a25efa06599

    • SSDEEP

      3072:5ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:js4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks