General

  • Target

    JaffaCakes118_177cf5a40982d050f37f38195a90adfffe369386f56c5f877ebadcbcd0499e97

  • Size

    163KB

  • Sample

    241226-vh45va1rcn

  • MD5

    4d5988e8771f2b0073cacbb435cc2d79

  • SHA1

    1c078e12b45be0c20faccc48d8114912b0f661c1

  • SHA256

    177cf5a40982d050f37f38195a90adfffe369386f56c5f877ebadcbcd0499e97

  • SHA512

    2f0a37714e3bc0df3467122bd6610d2877f626edb3ea70294a90aff86f045d63c7cfadb3cd793ad57d3b6077b994375907307917fa4cd2951b79dec08485cb1a

  • SSDEEP

    3072:Gar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:As4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_177cf5a40982d050f37f38195a90adfffe369386f56c5f877ebadcbcd0499e97

    • Size

      163KB

    • MD5

      4d5988e8771f2b0073cacbb435cc2d79

    • SHA1

      1c078e12b45be0c20faccc48d8114912b0f661c1

    • SHA256

      177cf5a40982d050f37f38195a90adfffe369386f56c5f877ebadcbcd0499e97

    • SHA512

      2f0a37714e3bc0df3467122bd6610d2877f626edb3ea70294a90aff86f045d63c7cfadb3cd793ad57d3b6077b994375907307917fa4cd2951b79dec08485cb1a

    • SSDEEP

      3072:Gar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:As4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks