General

  • Target

    JaffaCakes118_6996cc89d951b552d7c4fe973050c3dd2bbddffd4fef68b30387ca8f116c0c30

  • Size

    161KB

  • Sample

    241221-18cq6s1rfr

  • MD5

    3767addbc1ba1e3d454dacb4cccc3068

  • SHA1

    5ad7c504d4816227710a4a5ce0f24db14745d773

  • SHA256

    6996cc89d951b552d7c4fe973050c3dd2bbddffd4fef68b30387ca8f116c0c30

  • SHA512

    1bb2678ae13592138ce399bda623cb76cb1dbaffdaa5a847adf1d2441015e95ca8786df09243de2117402dd32cb5a340b9f765e32bdc3023293a15f7f699818e

  • SSDEEP

    3072:SaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:XnS62Fl+pkeJl3CvRStrFl+EYE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6996cc89d951b552d7c4fe973050c3dd2bbddffd4fef68b30387ca8f116c0c30

    • Size

      161KB

    • MD5

      3767addbc1ba1e3d454dacb4cccc3068

    • SHA1

      5ad7c504d4816227710a4a5ce0f24db14745d773

    • SHA256

      6996cc89d951b552d7c4fe973050c3dd2bbddffd4fef68b30387ca8f116c0c30

    • SHA512

      1bb2678ae13592138ce399bda623cb76cb1dbaffdaa5a847adf1d2441015e95ca8786df09243de2117402dd32cb5a340b9f765e32bdc3023293a15f7f699818e

    • SSDEEP

      3072:SaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:XnS62Fl+pkeJl3CvRStrFl+EYE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks