General

  • Target

    JaffaCakes118_e6e5e91555c7c69a435b4e6afc426a56cdeca8c0d859d290e6d1515ff64988a3

  • Size

    163KB

  • Sample

    241225-x7w7mstqct

  • MD5

    b908717ee5e53ffef24830ee3cb79a2e

  • SHA1

    aaf42b4468bf6cc9f3ba7651885fb30d75a667bd

  • SHA256

    e6e5e91555c7c69a435b4e6afc426a56cdeca8c0d859d290e6d1515ff64988a3

  • SHA512

    cee449556defd2f93b31d2bf708f2d2b4a68295ac58012c2466ef2fedeeee88eb6b525a8030ffa4110ad2e52a8cd528975076a6628c19e7a6d69c02314bee062

  • SSDEEP

    3072:2ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:ws4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e6e5e91555c7c69a435b4e6afc426a56cdeca8c0d859d290e6d1515ff64988a3

    • Size

      163KB

    • MD5

      b908717ee5e53ffef24830ee3cb79a2e

    • SHA1

      aaf42b4468bf6cc9f3ba7651885fb30d75a667bd

    • SHA256

      e6e5e91555c7c69a435b4e6afc426a56cdeca8c0d859d290e6d1515ff64988a3

    • SHA512

      cee449556defd2f93b31d2bf708f2d2b4a68295ac58012c2466ef2fedeeee88eb6b525a8030ffa4110ad2e52a8cd528975076a6628c19e7a6d69c02314bee062

    • SSDEEP

      3072:2ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:ws4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks