General

  • Target

    JaffaCakes118_6d43516217ff7b4b2b5df1da57e4eead6226c0c4dc28e8f3d069598150b4c29a

  • Size

    163KB

  • Sample

    241229-fqgl7atkgv

  • MD5

    61558ea6e3f6fc92fe2eeaf9b8d40c04

  • SHA1

    2bc277f3871e96489113504a64993486ee964c22

  • SHA256

    6d43516217ff7b4b2b5df1da57e4eead6226c0c4dc28e8f3d069598150b4c29a

  • SHA512

    10873755b14eadc8819786483528ed257c0d108a8620ce1f4e777c1ff379d7c1bee93dd34abd51a408ffd6fe16538c85960434c910c95d9d7520df18a48a0e2c

  • SSDEEP

    3072:har6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:7s4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6d43516217ff7b4b2b5df1da57e4eead6226c0c4dc28e8f3d069598150b4c29a

    • Size

      163KB

    • MD5

      61558ea6e3f6fc92fe2eeaf9b8d40c04

    • SHA1

      2bc277f3871e96489113504a64993486ee964c22

    • SHA256

      6d43516217ff7b4b2b5df1da57e4eead6226c0c4dc28e8f3d069598150b4c29a

    • SHA512

      10873755b14eadc8819786483528ed257c0d108a8620ce1f4e777c1ff379d7c1bee93dd34abd51a408ffd6fe16538c85960434c910c95d9d7520df18a48a0e2c

    • SSDEEP

      3072:har6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:7s4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks