General

  • Target

    JaffaCakes118_913d1ecf35871de4dd47a1c34da38d478be535dbfa126790218037524ac6b696

  • Size

    163KB

  • Sample

    241224-pqg3dsxlfw

  • MD5

    51996b8bfe6c1d96254badbb8f4f5bfb

  • SHA1

    eeadad9b16183d60a947cd49a14b9b00ef100826

  • SHA256

    913d1ecf35871de4dd47a1c34da38d478be535dbfa126790218037524ac6b696

  • SHA512

    495cff5803e3122bea9b84bc46e45bc2326cd87207f2189393e1cddd2debfe1e00e4e335b6eadb20a22af8c19df45a904e41495ac7e294cac7e07220bb75e90e

  • SSDEEP

    3072:dar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ps4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_913d1ecf35871de4dd47a1c34da38d478be535dbfa126790218037524ac6b696

    • Size

      163KB

    • MD5

      51996b8bfe6c1d96254badbb8f4f5bfb

    • SHA1

      eeadad9b16183d60a947cd49a14b9b00ef100826

    • SHA256

      913d1ecf35871de4dd47a1c34da38d478be535dbfa126790218037524ac6b696

    • SHA512

      495cff5803e3122bea9b84bc46e45bc2326cd87207f2189393e1cddd2debfe1e00e4e335b6eadb20a22af8c19df45a904e41495ac7e294cac7e07220bb75e90e

    • SSDEEP

      3072:dar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ps4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks