General

  • Target

    JaffaCakes118_3708209480e6510874682da6065595ca039d86100d01bdb594896b4fa544db1b

  • Size

    163KB

  • Sample

    241224-z133qaxpdn

  • MD5

    9f952aaf8e808b0c3817854c0329cdb4

  • SHA1

    06841e4f9be1838fd456ee694cf4b99c77d2ced3

  • SHA256

    3708209480e6510874682da6065595ca039d86100d01bdb594896b4fa544db1b

  • SHA512

    7b246bf79e52557f73f989ae1bd1472e2c7682c78d99a5e981737611623ef8bb07d69838e6dc5d9d4e021461982bcdbe5558945b1eb3fec81a334bae1d7a2cad

  • SSDEEP

    3072:zar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:1s4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_3708209480e6510874682da6065595ca039d86100d01bdb594896b4fa544db1b

    • Size

      163KB

    • MD5

      9f952aaf8e808b0c3817854c0329cdb4

    • SHA1

      06841e4f9be1838fd456ee694cf4b99c77d2ced3

    • SHA256

      3708209480e6510874682da6065595ca039d86100d01bdb594896b4fa544db1b

    • SHA512

      7b246bf79e52557f73f989ae1bd1472e2c7682c78d99a5e981737611623ef8bb07d69838e6dc5d9d4e021461982bcdbe5558945b1eb3fec81a334bae1d7a2cad

    • SSDEEP

      3072:zar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:1s4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks