General

  • Target

    JaffaCakes118_60063bd6e228efaf4b1d69a1d6357757660a24b2a11dd947e38fb1f17ceb8c7c

  • Size

    161KB

  • Sample

    241221-3rce7atqfz

  • MD5

    71a439696be978588312a42686e8ca3a

  • SHA1

    2b73f434f00ee7b5bfd47e55cd008177a3b1c034

  • SHA256

    60063bd6e228efaf4b1d69a1d6357757660a24b2a11dd947e38fb1f17ceb8c7c

  • SHA512

    43d2b592bf5251531181437f6b5c51a81cafac913833733e3db0b1b96bca77b68a70b97ab9ec4b6612effd8e17553e2c5cf3f8260fdd18a2bc24772136dc9a34

  • SSDEEP

    3072:VOSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2uGkFY:MnS62Fl+pkeJl3CvRStrFl+EYL

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_60063bd6e228efaf4b1d69a1d6357757660a24b2a11dd947e38fb1f17ceb8c7c

    • Size

      161KB

    • MD5

      71a439696be978588312a42686e8ca3a

    • SHA1

      2b73f434f00ee7b5bfd47e55cd008177a3b1c034

    • SHA256

      60063bd6e228efaf4b1d69a1d6357757660a24b2a11dd947e38fb1f17ceb8c7c

    • SHA512

      43d2b592bf5251531181437f6b5c51a81cafac913833733e3db0b1b96bca77b68a70b97ab9ec4b6612effd8e17553e2c5cf3f8260fdd18a2bc24772136dc9a34

    • SSDEEP

      3072:VOSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2uGkFY:MnS62Fl+pkeJl3CvRStrFl+EYL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks