General

  • Target

    JaffaCakes118_238dc07e9451ff428e4aec13bbc8cedcd7ecc1ab5fd1989225cfb7f9844b365b

  • Size

    163KB

  • Sample

    241225-wz3h1ssldq

  • MD5

    369edfc0fbac690e204866d37483661f

  • SHA1

    e47459d272882dd2f43c25e3c2d54eb698baca98

  • SHA256

    238dc07e9451ff428e4aec13bbc8cedcd7ecc1ab5fd1989225cfb7f9844b365b

  • SHA512

    8ba234e658988ef143383c4a423623833b3d3fd1d58de6d4c8adc1dbced846f1110f940ee74bb1d843265a91e7a07308211adf0abbae25ac9d8408a6dcdeed35

  • SSDEEP

    3072:4ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Cs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_238dc07e9451ff428e4aec13bbc8cedcd7ecc1ab5fd1989225cfb7f9844b365b

    • Size

      163KB

    • MD5

      369edfc0fbac690e204866d37483661f

    • SHA1

      e47459d272882dd2f43c25e3c2d54eb698baca98

    • SHA256

      238dc07e9451ff428e4aec13bbc8cedcd7ecc1ab5fd1989225cfb7f9844b365b

    • SHA512

      8ba234e658988ef143383c4a423623833b3d3fd1d58de6d4c8adc1dbced846f1110f940ee74bb1d843265a91e7a07308211adf0abbae25ac9d8408a6dcdeed35

    • SSDEEP

      3072:4ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Cs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks