General

  • Target

    JaffaCakes118_e0f688f4834a984932a00b85f0973da85ed4e0819b7e08a94e11e493619d9bbc

  • Size

    161KB

  • Sample

    241222-fvmc8svpfj

  • MD5

    a3b6ec6ad96edfadf2c077e8a5bffcc7

  • SHA1

    4572a71cada49aadb62b4fb8917dd688ba5c4de5

  • SHA256

    e0f688f4834a984932a00b85f0973da85ed4e0819b7e08a94e11e493619d9bbc

  • SHA512

    f581288436f96c9cc8b2ab923c5a8541d56d7bb68d99be3934180a8e9db68e5bce38f995bb6210bbacadcfbd579cdc54ee09aabb5b8efb7ca4453366354299b4

  • SSDEEP

    3072:VySuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2DGkFY:cnS62Fl+pkeJl3CvRStrFl+EYS

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e0f688f4834a984932a00b85f0973da85ed4e0819b7e08a94e11e493619d9bbc

    • Size

      161KB

    • MD5

      a3b6ec6ad96edfadf2c077e8a5bffcc7

    • SHA1

      4572a71cada49aadb62b4fb8917dd688ba5c4de5

    • SHA256

      e0f688f4834a984932a00b85f0973da85ed4e0819b7e08a94e11e493619d9bbc

    • SHA512

      f581288436f96c9cc8b2ab923c5a8541d56d7bb68d99be3934180a8e9db68e5bce38f995bb6210bbacadcfbd579cdc54ee09aabb5b8efb7ca4453366354299b4

    • SSDEEP

      3072:VySuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2DGkFY:cnS62Fl+pkeJl3CvRStrFl+EYS

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks