General

  • Target

    JaffaCakes118_92a58e5664cb2c98276188f06a76286153847fc002fe0c81dfbe675b3a4bfaf1

  • Size

    163KB

  • Sample

    241224-b4865sylbn

  • MD5

    3246616196710206cea56cca9b69013d

  • SHA1

    4fb3fc1fde1edfda06e3e6404bc2eb9ef5d00713

  • SHA256

    92a58e5664cb2c98276188f06a76286153847fc002fe0c81dfbe675b3a4bfaf1

  • SHA512

    ca3f431bd54733b495f96cbc7299c12021085efda11f621ceb246a8d420bc6bcf49c7378c65979e17fc11b75f45aeb493f8720e9abf29916e8feea0638a40b2c

  • SSDEEP

    3072:b9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:b9F6rQXvFczvYpQP

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_92a58e5664cb2c98276188f06a76286153847fc002fe0c81dfbe675b3a4bfaf1

    • Size

      163KB

    • MD5

      3246616196710206cea56cca9b69013d

    • SHA1

      4fb3fc1fde1edfda06e3e6404bc2eb9ef5d00713

    • SHA256

      92a58e5664cb2c98276188f06a76286153847fc002fe0c81dfbe675b3a4bfaf1

    • SHA512

      ca3f431bd54733b495f96cbc7299c12021085efda11f621ceb246a8d420bc6bcf49c7378c65979e17fc11b75f45aeb493f8720e9abf29916e8feea0638a40b2c

    • SSDEEP

      3072:b9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:b9F6rQXvFczvYpQP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks