General

  • Target

    JaffaCakes118_915ecd787297f665962942477a7829c8fa9c34abb2497dc4865869add1ceb9d7

  • Size

    163KB

  • Sample

    241230-cexbqatrdm

  • MD5

    600264b888781747234955db02626aae

  • SHA1

    fe1f1ce578b958b101efd580c045218da0800400

  • SHA256

    915ecd787297f665962942477a7829c8fa9c34abb2497dc4865869add1ceb9d7

  • SHA512

    fe048fa65d41305e45292adababea30a86b581bc889ffdeea94062b366fc072fc81cf5dc4483f7083734efade9493e5bff524266e7b86da25c169d7c1e191565

  • SSDEEP

    3072:Kar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ms4p+ADxnSO6D2cOp

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_915ecd787297f665962942477a7829c8fa9c34abb2497dc4865869add1ceb9d7

    • Size

      163KB

    • MD5

      600264b888781747234955db02626aae

    • SHA1

      fe1f1ce578b958b101efd580c045218da0800400

    • SHA256

      915ecd787297f665962942477a7829c8fa9c34abb2497dc4865869add1ceb9d7

    • SHA512

      fe048fa65d41305e45292adababea30a86b581bc889ffdeea94062b366fc072fc81cf5dc4483f7083734efade9493e5bff524266e7b86da25c169d7c1e191565

    • SSDEEP

      3072:Kar6Ys6p54kfdo+APr0aYSbeO6aal8jeytFQTOpp2J:Ms4p+ADxnSO6D2cOp

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks