General

  • Target

    JaffaCakes118_591a0b188ebcf4a443e4af02e289b947f6ab73f6f0e89cf33ce0e6b03b59cbad

  • Size

    163KB

  • Sample

    241224-crxg9azjar

  • MD5

    1256657f032d68a07ed2446d79e44920

  • SHA1

    de4f80f07670d4d415c049d842c7d5a54a90b923

  • SHA256

    591a0b188ebcf4a443e4af02e289b947f6ab73f6f0e89cf33ce0e6b03b59cbad

  • SHA512

    beb1eba5dbcceb40c75b7cfb8a224f533f640ee7a390e72bcb48ff50544d71205353707c8a4682b52327a1e689b67bfba607d203d8cfe0e43cf21d1cd47a82d5

  • SSDEEP

    3072:lar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Hs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_591a0b188ebcf4a443e4af02e289b947f6ab73f6f0e89cf33ce0e6b03b59cbad

    • Size

      163KB

    • MD5

      1256657f032d68a07ed2446d79e44920

    • SHA1

      de4f80f07670d4d415c049d842c7d5a54a90b923

    • SHA256

      591a0b188ebcf4a443e4af02e289b947f6ab73f6f0e89cf33ce0e6b03b59cbad

    • SHA512

      beb1eba5dbcceb40c75b7cfb8a224f533f640ee7a390e72bcb48ff50544d71205353707c8a4682b52327a1e689b67bfba607d203d8cfe0e43cf21d1cd47a82d5

    • SSDEEP

      3072:lar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Hs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks