General

  • Target

    JaffaCakes118_54d6dc086d5a08c271024f7e8ba5a85e92ecf0b735a0fa5146afc0dd98aef7f7

  • Size

    163KB

  • Sample

    241225-p23s8stkat

  • MD5

    39d2517165590236d4215c2ac108a346

  • SHA1

    c24440802ce97d3ff130b54d6d8449990907d137

  • SHA256

    54d6dc086d5a08c271024f7e8ba5a85e92ecf0b735a0fa5146afc0dd98aef7f7

  • SHA512

    26c357309803f505bc231771e337aa94a07f69750828c65cf413440542ec35a8591a0004f818f277d6237913903d0b770a5ba2c512ec192841312405d1c5c381

  • SSDEEP

    3072:aar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:cs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_54d6dc086d5a08c271024f7e8ba5a85e92ecf0b735a0fa5146afc0dd98aef7f7

    • Size

      163KB

    • MD5

      39d2517165590236d4215c2ac108a346

    • SHA1

      c24440802ce97d3ff130b54d6d8449990907d137

    • SHA256

      54d6dc086d5a08c271024f7e8ba5a85e92ecf0b735a0fa5146afc0dd98aef7f7

    • SHA512

      26c357309803f505bc231771e337aa94a07f69750828c65cf413440542ec35a8591a0004f818f277d6237913903d0b770a5ba2c512ec192841312405d1c5c381

    • SSDEEP

      3072:aar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:cs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks