General

  • Target

    JaffaCakes118_9b2a2d6562f142d347a0a451086d9275b78b39b92400a3e54285549a1def1973

  • Size

    161KB

  • Sample

    241222-wx9vbavmfs

  • MD5

    55bf5091a2424b1896f62f34e0782348

  • SHA1

    c9c954e790b7daa91603a558c46fbb7b2bd64ad1

  • SHA256

    9b2a2d6562f142d347a0a451086d9275b78b39b92400a3e54285549a1def1973

  • SHA512

    47e7040719d5ba7592ec9b13a08ebee15f188a9240c5f98d18006766ffab1e7ba61bebaf909ee8a563bc831a444f8712db6a75716c47c5e199f2e30032413994

  • SSDEEP

    3072:LaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:2nS62Fl+pkeJl3CvRStrFl+EYE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_9b2a2d6562f142d347a0a451086d9275b78b39b92400a3e54285549a1def1973

    • Size

      161KB

    • MD5

      55bf5091a2424b1896f62f34e0782348

    • SHA1

      c9c954e790b7daa91603a558c46fbb7b2bd64ad1

    • SHA256

      9b2a2d6562f142d347a0a451086d9275b78b39b92400a3e54285549a1def1973

    • SHA512

      47e7040719d5ba7592ec9b13a08ebee15f188a9240c5f98d18006766ffab1e7ba61bebaf909ee8a563bc831a444f8712db6a75716c47c5e199f2e30032413994

    • SSDEEP

      3072:LaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:2nS62Fl+pkeJl3CvRStrFl+EYE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks