General

  • Target

    JaffaCakes118_fb8f3bc326b4a3b08d2247a8f36ccec090216191452db63182232b604193de99

  • Size

    163KB

  • Sample

    241226-yfdfwswqet

  • MD5

    65b32995f4f3970578bef00f617404b5

  • SHA1

    bc3a2a39aaff7f8054023e650871ee5cc7d17cba

  • SHA256

    fb8f3bc326b4a3b08d2247a8f36ccec090216191452db63182232b604193de99

  • SHA512

    dac5160fe869165f551aaf499ac714fc1a142d4dd7d1aa4cf8fb705c99a2bd3a2dbcec5c47296cc43579ec728d51f9f715f790717d6a8084225d6142d14ada5a

  • SSDEEP

    3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fb8f3bc326b4a3b08d2247a8f36ccec090216191452db63182232b604193de99

    • Size

      163KB

    • MD5

      65b32995f4f3970578bef00f617404b5

    • SHA1

      bc3a2a39aaff7f8054023e650871ee5cc7d17cba

    • SHA256

      fb8f3bc326b4a3b08d2247a8f36ccec090216191452db63182232b604193de99

    • SHA512

      dac5160fe869165f551aaf499ac714fc1a142d4dd7d1aa4cf8fb705c99a2bd3a2dbcec5c47296cc43579ec728d51f9f715f790717d6a8084225d6142d14ada5a

    • SSDEEP

      3072:1ar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Xs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks