General

  • Target

    JaffaCakes118_894f9075cb085fb8a4c820b555545ccd5f31882a6bebeff376641ab8f59a0d94

  • Size

    163KB

  • Sample

    241230-3fdtwatmhk

  • MD5

    7bf5103d68ae5d185ee853377d689648

  • SHA1

    b0f49fb6b7b450bc68e324fdbe88c5b340ab2815

  • SHA256

    894f9075cb085fb8a4c820b555545ccd5f31882a6bebeff376641ab8f59a0d94

  • SHA512

    5f5d5fcaace4ed5b4752b069190e6408b0fea0bdc86fdc2927612e8afef1ca259194489f7c02b69b8aa564558ee03da54dcbbab15400f4c73273b7fbb1d7a5c7

  • SSDEEP

    3072:V9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:V9F6rQXvFczvYpQP

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_894f9075cb085fb8a4c820b555545ccd5f31882a6bebeff376641ab8f59a0d94

    • Size

      163KB

    • MD5

      7bf5103d68ae5d185ee853377d689648

    • SHA1

      b0f49fb6b7b450bc68e324fdbe88c5b340ab2815

    • SHA256

      894f9075cb085fb8a4c820b555545ccd5f31882a6bebeff376641ab8f59a0d94

    • SHA512

      5f5d5fcaace4ed5b4752b069190e6408b0fea0bdc86fdc2927612e8afef1ca259194489f7c02b69b8aa564558ee03da54dcbbab15400f4c73273b7fbb1d7a5c7

    • SSDEEP

      3072:V9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:V9F6rQXvFczvYpQP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks