General

  • Target

    JaffaCakes118_86983e8bad995544a705cfe268977156018cf653d213212e0123639305a81969

  • Size

    163KB

  • Sample

    241230-b9gn3stphp

  • MD5

    155a27e31124d49a9c154b9a09c25b2e

  • SHA1

    23d959ccef950f7c27dd8391e41f5e2398d75d9c

  • SHA256

    86983e8bad995544a705cfe268977156018cf653d213212e0123639305a81969

  • SHA512

    6c934702fd62c33ad32527d99a94143dd83c30b240fdac1ae5271af3e38241eabac5ae69eb7b59da745858d935d78dc0eae61a804ba3eeba6850c7687872538e

  • SSDEEP

    3072:mar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:gs4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_86983e8bad995544a705cfe268977156018cf653d213212e0123639305a81969

    • Size

      163KB

    • MD5

      155a27e31124d49a9c154b9a09c25b2e

    • SHA1

      23d959ccef950f7c27dd8391e41f5e2398d75d9c

    • SHA256

      86983e8bad995544a705cfe268977156018cf653d213212e0123639305a81969

    • SHA512

      6c934702fd62c33ad32527d99a94143dd83c30b240fdac1ae5271af3e38241eabac5ae69eb7b59da745858d935d78dc0eae61a804ba3eeba6850c7687872538e

    • SSDEEP

      3072:mar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:gs4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks