General

  • Target

    JaffaCakes118_252dcb5600851ae6d70664d024ad66674629af714dea0f77ba30646db6361275

  • Size

    161KB

  • Sample

    241221-xzrxysxlfr

  • MD5

    80aaaadd6d5ea7faf0b385837a020a0d

  • SHA1

    f4c8d9d2a1276e155893a72a2ea9557143379573

  • SHA256

    252dcb5600851ae6d70664d024ad66674629af714dea0f77ba30646db6361275

  • SHA512

    1ea9cd0e50b8bb2e3b09bd94a50ebe18f42693c5f90cbe933da17413c8e3221c8e14d35d98974ab81567e173bd86bbc589cb31c9061490823d75a138cb802a42

  • SSDEEP

    3072:U1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:inS62Fl+pkeJl3CvRStrFl+EYh

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_252dcb5600851ae6d70664d024ad66674629af714dea0f77ba30646db6361275

    • Size

      161KB

    • MD5

      80aaaadd6d5ea7faf0b385837a020a0d

    • SHA1

      f4c8d9d2a1276e155893a72a2ea9557143379573

    • SHA256

      252dcb5600851ae6d70664d024ad66674629af714dea0f77ba30646db6361275

    • SHA512

      1ea9cd0e50b8bb2e3b09bd94a50ebe18f42693c5f90cbe933da17413c8e3221c8e14d35d98974ab81567e173bd86bbc589cb31c9061490823d75a138cb802a42

    • SSDEEP

      3072:U1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:inS62Fl+pkeJl3CvRStrFl+EYh

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks