General

  • Target

    JaffaCakes118_9fe6aa73af0090fff96462b00ef06bc8ff8fe84a51c57af9f9b451a7a5650ee6

  • Size

    161KB

  • Sample

    241221-wpfw9svpht

  • MD5

    45c90143e159b608da67cbc2e032f914

  • SHA1

    880cd3604d3a485e5691ca7af56ddfa338f7456c

  • SHA256

    9fe6aa73af0090fff96462b00ef06bc8ff8fe84a51c57af9f9b451a7a5650ee6

  • SHA512

    cba89241a9df833d4bc106b0f8b6a5bbd20def5203445cd849fe59bb1bfb0d3d56cd179c9eaf74d4405c61ec24621a761b4323cf38c5d41472e2d7bed8916ecc

  • SSDEEP

    3072:xtSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:LnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9fe6aa73af0090fff96462b00ef06bc8ff8fe84a51c57af9f9b451a7a5650ee6

    • Size

      161KB

    • MD5

      45c90143e159b608da67cbc2e032f914

    • SHA1

      880cd3604d3a485e5691ca7af56ddfa338f7456c

    • SHA256

      9fe6aa73af0090fff96462b00ef06bc8ff8fe84a51c57af9f9b451a7a5650ee6

    • SHA512

      cba89241a9df833d4bc106b0f8b6a5bbd20def5203445cd849fe59bb1bfb0d3d56cd179c9eaf74d4405c61ec24621a761b4323cf38c5d41472e2d7bed8916ecc

    • SSDEEP

      3072:xtSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:LnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks