General

  • Target

    JaffaCakes118_9b5c9cbed30d72a6c3c0391a8b57f1570f12f89cb9ef04b98336fe3e0a40c3d7

  • Size

    163KB

  • Sample

    241226-vn422askbj

  • MD5

    6ba1b59058dc0919f9589aff96da2fa5

  • SHA1

    842b729b7bc361f75300f8b6df84df7ecde85c6f

  • SHA256

    9b5c9cbed30d72a6c3c0391a8b57f1570f12f89cb9ef04b98336fe3e0a40c3d7

  • SHA512

    79c7aef93d27822477401cfdf71a0003c3df2b3dba9536381942a14bcc3e8ab18e39af4db5c48a56fc10562798ed6dbedf9f61ee4b36e43894b126d12bc8538d

  • SSDEEP

    3072:par6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ts4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9b5c9cbed30d72a6c3c0391a8b57f1570f12f89cb9ef04b98336fe3e0a40c3d7

    • Size

      163KB

    • MD5

      6ba1b59058dc0919f9589aff96da2fa5

    • SHA1

      842b729b7bc361f75300f8b6df84df7ecde85c6f

    • SHA256

      9b5c9cbed30d72a6c3c0391a8b57f1570f12f89cb9ef04b98336fe3e0a40c3d7

    • SHA512

      79c7aef93d27822477401cfdf71a0003c3df2b3dba9536381942a14bcc3e8ab18e39af4db5c48a56fc10562798ed6dbedf9f61ee4b36e43894b126d12bc8538d

    • SSDEEP

      3072:par6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ts4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks