General

  • Target

    JaffaCakes118_f51b053f54a855a475f49fa607fe2cfb3e86062937afe5dc4c4807edf61dff4c

  • Size

    163KB

  • Sample

    241224-a4jqtawras

  • MD5

    a1f74d6859ef17ea6c4a125f85177f37

  • SHA1

    4fce0308d4ff8087c544af5740c41ebf78f1b058

  • SHA256

    f51b053f54a855a475f49fa607fe2cfb3e86062937afe5dc4c4807edf61dff4c

  • SHA512

    65e471fb2bccc8f66c51e150332c930c0a15557b3fe9fc67fa710a2814dc800a6dafdf79e98fee1101db78dd30711449653149c25c2d81e1323ff91ccafb7812

  • SSDEEP

    3072:49F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:49F6rQXvFczvYpQP

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f51b053f54a855a475f49fa607fe2cfb3e86062937afe5dc4c4807edf61dff4c

    • Size

      163KB

    • MD5

      a1f74d6859ef17ea6c4a125f85177f37

    • SHA1

      4fce0308d4ff8087c544af5740c41ebf78f1b058

    • SHA256

      f51b053f54a855a475f49fa607fe2cfb3e86062937afe5dc4c4807edf61dff4c

    • SHA512

      65e471fb2bccc8f66c51e150332c930c0a15557b3fe9fc67fa710a2814dc800a6dafdf79e98fee1101db78dd30711449653149c25c2d81e1323ff91ccafb7812

    • SSDEEP

      3072:49F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:49F6rQXvFczvYpQP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks