General

  • Target

    JaffaCakes118_eb64336bd4582ffca44278a68ec634828d10595851e0d45fa2278b2d241e250c

  • Size

    161KB

  • Sample

    241222-gc1zcawmdr

  • MD5

    e29ef1da9b8734173bb350daff6655c9

  • SHA1

    13ce83c9b48106a0243feadf8d9f51ddb84f8132

  • SHA256

    eb64336bd4582ffca44278a68ec634828d10595851e0d45fa2278b2d241e250c

  • SHA512

    0b6ad7116d125aa4e889d093a3373fe692a479ade10f610fc6efa7453c85116e7af92b70dca47b1c99456d8de347dc86c34be42271c37ae5ae3fd2f2fd91e3ab

  • SSDEEP

    3072:qnSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:SnS62Fl+pkeJl3CvRStrFl+EY0

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_eb64336bd4582ffca44278a68ec634828d10595851e0d45fa2278b2d241e250c

    • Size

      161KB

    • MD5

      e29ef1da9b8734173bb350daff6655c9

    • SHA1

      13ce83c9b48106a0243feadf8d9f51ddb84f8132

    • SHA256

      eb64336bd4582ffca44278a68ec634828d10595851e0d45fa2278b2d241e250c

    • SHA512

      0b6ad7116d125aa4e889d093a3373fe692a479ade10f610fc6efa7453c85116e7af92b70dca47b1c99456d8de347dc86c34be42271c37ae5ae3fd2f2fd91e3ab

    • SSDEEP

      3072:qnSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:SnS62Fl+pkeJl3CvRStrFl+EY0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks