General

  • Target

    JaffaCakes118_38db6b5c909b893aa4d1fa9849c3f1a7bd9488db27511fce47b42a54a7382cd8

  • Size

    163KB

  • Sample

    241226-2gmbzatlfn

  • MD5

    d45332787a00d27ba6a37236651ad9e7

  • SHA1

    f761fc6d53695507e751ce576d1a5422f877ea81

  • SHA256

    38db6b5c909b893aa4d1fa9849c3f1a7bd9488db27511fce47b42a54a7382cd8

  • SHA512

    afeed47d396c8c5d18cec499c2465c01ca7b40d6a3bd26aeab2350480f6b5cf40b92030e8eae8ba38fa8d03419f862eb7cfa986ee97eca1343b1e46338a38dc2

  • SSDEEP

    3072:Var6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:3s4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_38db6b5c909b893aa4d1fa9849c3f1a7bd9488db27511fce47b42a54a7382cd8

    • Size

      163KB

    • MD5

      d45332787a00d27ba6a37236651ad9e7

    • SHA1

      f761fc6d53695507e751ce576d1a5422f877ea81

    • SHA256

      38db6b5c909b893aa4d1fa9849c3f1a7bd9488db27511fce47b42a54a7382cd8

    • SHA512

      afeed47d396c8c5d18cec499c2465c01ca7b40d6a3bd26aeab2350480f6b5cf40b92030e8eae8ba38fa8d03419f862eb7cfa986ee97eca1343b1e46338a38dc2

    • SSDEEP

      3072:Var6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:3s4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks