General

  • Target

    JaffaCakes118_e8581bf7adf8ab9c1606fc9a9b5c8a1dada12b8c1c6685e2eb87c4709affbc96

  • Size

    163KB

  • Sample

    241229-f1almatmdp

  • MD5

    bba7ae330c49588e391a09b75a4bbf39

  • SHA1

    1c0a778eb9454e105f9b2f261dfef94ed3bc9f99

  • SHA256

    e8581bf7adf8ab9c1606fc9a9b5c8a1dada12b8c1c6685e2eb87c4709affbc96

  • SHA512

    d443fb6012f7fcb539c1662fd904578ba62b0c2c7dfa57f2c5407d2abca83db182965270ec73880d5f82a602ac94c215026ce0222c62e131b3e56dfe7a1ae497

  • SSDEEP

    3072:Oar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ys4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e8581bf7adf8ab9c1606fc9a9b5c8a1dada12b8c1c6685e2eb87c4709affbc96

    • Size

      163KB

    • MD5

      bba7ae330c49588e391a09b75a4bbf39

    • SHA1

      1c0a778eb9454e105f9b2f261dfef94ed3bc9f99

    • SHA256

      e8581bf7adf8ab9c1606fc9a9b5c8a1dada12b8c1c6685e2eb87c4709affbc96

    • SHA512

      d443fb6012f7fcb539c1662fd904578ba62b0c2c7dfa57f2c5407d2abca83db182965270ec73880d5f82a602ac94c215026ce0222c62e131b3e56dfe7a1ae497

    • SSDEEP

      3072:Oar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ys4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks