General

  • Target

    JaffaCakes118_7bb9294ba9508499294319e2501ae805a91a9c79b0a3c159eb0d0dfd6b22aae3

  • Size

    163KB

  • Sample

    241229-rae9zatjaq

  • MD5

    3199d958765a05aa4ffb7e950a611473

  • SHA1

    9c96f13cc506a9aba6982bea593866a97f9afcc0

  • SHA256

    7bb9294ba9508499294319e2501ae805a91a9c79b0a3c159eb0d0dfd6b22aae3

  • SHA512

    4bb704811b0a825f070360b699074906a841a0271978822b8472a8b4925877811b5aa3df1df7671783185fdd6f4e7e764f9806b46163a01936cabcb30e1b614c

  • SSDEEP

    3072:har6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:7s4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7bb9294ba9508499294319e2501ae805a91a9c79b0a3c159eb0d0dfd6b22aae3

    • Size

      163KB

    • MD5

      3199d958765a05aa4ffb7e950a611473

    • SHA1

      9c96f13cc506a9aba6982bea593866a97f9afcc0

    • SHA256

      7bb9294ba9508499294319e2501ae805a91a9c79b0a3c159eb0d0dfd6b22aae3

    • SHA512

      4bb704811b0a825f070360b699074906a841a0271978822b8472a8b4925877811b5aa3df1df7671783185fdd6f4e7e764f9806b46163a01936cabcb30e1b614c

    • SSDEEP

      3072:har6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:7s4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks