General

  • Target

    JaffaCakes118_847e9b1d89536dd3871a595a75d251707b8f0e1d9234f80534cb3eeaf6e96635

  • Size

    161KB

  • Sample

    241222-n914yaxqdn

  • MD5

    f32edc955c97641a8dd64076587c22f8

  • SHA1

    13d5d88cc6c2648a6a761604ea10473892fae8d3

  • SHA256

    847e9b1d89536dd3871a595a75d251707b8f0e1d9234f80534cb3eeaf6e96635

  • SHA512

    cf729bed9af6c14d53d42ef8ad4b14532509a11f3b0dddae359216014fcf52f8b3d64b68020cced57b3af7d26c7278c3366b05424625da8aee92108e119f16ea

  • SSDEEP

    3072:stSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:KnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_847e9b1d89536dd3871a595a75d251707b8f0e1d9234f80534cb3eeaf6e96635

    • Size

      161KB

    • MD5

      f32edc955c97641a8dd64076587c22f8

    • SHA1

      13d5d88cc6c2648a6a761604ea10473892fae8d3

    • SHA256

      847e9b1d89536dd3871a595a75d251707b8f0e1d9234f80534cb3eeaf6e96635

    • SHA512

      cf729bed9af6c14d53d42ef8ad4b14532509a11f3b0dddae359216014fcf52f8b3d64b68020cced57b3af7d26c7278c3366b05424625da8aee92108e119f16ea

    • SSDEEP

      3072:stSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:KnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks