General

  • Target

    JaffaCakes118_7b47f477b21f852c51ffd54a007dca3f2c09cc486e51e70b480f8e8f1a52c32a

  • Size

    163KB

  • Sample

    241230-f1zkrayrbx

  • MD5

    eee62aecda9a1c1b1105d5332eb7cbaf

  • SHA1

    2cc651cf7ae7a5a3364cb84111be8e7e8b5aabb6

  • SHA256

    7b47f477b21f852c51ffd54a007dca3f2c09cc486e51e70b480f8e8f1a52c32a

  • SHA512

    93fb9c6af93d21168524f478ec0fdc7b76eb762152032becb7ee41c2c5ffcdcc82060f70dfc230101fb6833a31d43880c13f98355cbb75c69931eda36955836b

  • SSDEEP

    3072:m9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:m9F6rQXvFczvYpQP

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7b47f477b21f852c51ffd54a007dca3f2c09cc486e51e70b480f8e8f1a52c32a

    • Size

      163KB

    • MD5

      eee62aecda9a1c1b1105d5332eb7cbaf

    • SHA1

      2cc651cf7ae7a5a3364cb84111be8e7e8b5aabb6

    • SHA256

      7b47f477b21f852c51ffd54a007dca3f2c09cc486e51e70b480f8e8f1a52c32a

    • SHA512

      93fb9c6af93d21168524f478ec0fdc7b76eb762152032becb7ee41c2c5ffcdcc82060f70dfc230101fb6833a31d43880c13f98355cbb75c69931eda36955836b

    • SSDEEP

      3072:m9F/oNrQb4xVubbXP/NTccbsFvCeLmXH57V30e8Pj:m9F6rQXvFczvYpQP

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks