General

  • Target

    JaffaCakes118_0fb3308a690051fe057f04c80ac426b25ebced57f9525c879c6345b3ba03e2c2

  • Size

    161KB

  • Sample

    241221-3n9aravjdp

  • MD5

    be5e61bc86b0bb1d3cc6f9a7c6f1e86b

  • SHA1

    7fbb69780e93426e9c6518ecd15d3d7ce710aeae

  • SHA256

    0fb3308a690051fe057f04c80ac426b25ebced57f9525c879c6345b3ba03e2c2

  • SHA512

    8774b8af62e3d60cb52abc7136afd120e232e063952c83b3edd3b049d3f1cb3385bebeec8eead731b081b86ec17d04005cae8f82a0264a157c71deadd1e8a048

  • SSDEEP

    3072:8oSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:DnS62Fl+pkeJl3CvRStrFl+EYn

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0fb3308a690051fe057f04c80ac426b25ebced57f9525c879c6345b3ba03e2c2

    • Size

      161KB

    • MD5

      be5e61bc86b0bb1d3cc6f9a7c6f1e86b

    • SHA1

      7fbb69780e93426e9c6518ecd15d3d7ce710aeae

    • SHA256

      0fb3308a690051fe057f04c80ac426b25ebced57f9525c879c6345b3ba03e2c2

    • SHA512

      8774b8af62e3d60cb52abc7136afd120e232e063952c83b3edd3b049d3f1cb3385bebeec8eead731b081b86ec17d04005cae8f82a0264a157c71deadd1e8a048

    • SSDEEP

      3072:8oSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:DnS62Fl+pkeJl3CvRStrFl+EYn

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks