General

  • Target

    JaffaCakes118_e2042fc6606b2ee489474c89817ee054b508ecb510b946376eb1343a60749ab6

  • Size

    163KB

  • Sample

    241225-rbs78avkes

  • MD5

    05c0dc457554768c603fbaf6bbd70eb6

  • SHA1

    1c8869400440edf4a8c6806ea42bb952d6f6f1b6

  • SHA256

    e2042fc6606b2ee489474c89817ee054b508ecb510b946376eb1343a60749ab6

  • SHA512

    5591c19d6594ae8c50195e6293af09b3f8ba53382a88fe9cc739aa939eca23b2f3087f82a189ffd6d5350ea91ec36a606d3dbae98a133da20e17d980f1438760

  • SSDEEP

    3072:/ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Zs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e2042fc6606b2ee489474c89817ee054b508ecb510b946376eb1343a60749ab6

    • Size

      163KB

    • MD5

      05c0dc457554768c603fbaf6bbd70eb6

    • SHA1

      1c8869400440edf4a8c6806ea42bb952d6f6f1b6

    • SHA256

      e2042fc6606b2ee489474c89817ee054b508ecb510b946376eb1343a60749ab6

    • SHA512

      5591c19d6594ae8c50195e6293af09b3f8ba53382a88fe9cc739aa939eca23b2f3087f82a189ffd6d5350ea91ec36a606d3dbae98a133da20e17d980f1438760

    • SSDEEP

      3072:/ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Zs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks