General

  • Target

    JaffaCakes118_51138551ecb78b07582fbff19ec6080a1af32b0a5e7ab04aa79445ce74d5adee

  • Size

    163KB

  • Sample

    241227-bs8fgaxqfk

  • MD5

    b4cc4d6aff5c1e390ff0ae537593ba3c

  • SHA1

    5ffb1114f62cbb3a6cae171bfb86c89081210eac

  • SHA256

    51138551ecb78b07582fbff19ec6080a1af32b0a5e7ab04aa79445ce74d5adee

  • SHA512

    504abc3a86869e0b13a037cb74d9e4ca5153dbb9e788b633c329daeeaf72b43823b3437f1e0456f389428d278cd74f6e4d34f6ee27cf0a83f20b93474aa90e69

  • SSDEEP

    3072:Nar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:/s4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_51138551ecb78b07582fbff19ec6080a1af32b0a5e7ab04aa79445ce74d5adee

    • Size

      163KB

    • MD5

      b4cc4d6aff5c1e390ff0ae537593ba3c

    • SHA1

      5ffb1114f62cbb3a6cae171bfb86c89081210eac

    • SHA256

      51138551ecb78b07582fbff19ec6080a1af32b0a5e7ab04aa79445ce74d5adee

    • SHA512

      504abc3a86869e0b13a037cb74d9e4ca5153dbb9e788b633c329daeeaf72b43823b3437f1e0456f389428d278cd74f6e4d34f6ee27cf0a83f20b93474aa90e69

    • SSDEEP

      3072:Nar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:/s4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks