General

  • Target

    JaffaCakes118_6bc77a4ecaea730ab327ea7e4e31346e666ac4f85b01d271d59c6939252e04fd

  • Size

    161KB

  • Sample

    241222-xjl2rswmfn

  • MD5

    1c561efed5a3dcc85483d593d027e69b

  • SHA1

    3835ce7978cedfd2796aaa0bda1e8b2cd66ea8a8

  • SHA256

    6bc77a4ecaea730ab327ea7e4e31346e666ac4f85b01d271d59c6939252e04fd

  • SHA512

    08c5c15fd39fa79ceb8d8bbb30a6f6fa5c44783d59157deffc157e8aeda5b87df7c14d953c1fa6eae63be1aa69e69ab657242fd0bf3c467be2989fd57eac197e

  • SSDEEP

    3072:GySuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2DGkFY:rnS62Fl+pkeJl3CvRStrFl+EYS

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6bc77a4ecaea730ab327ea7e4e31346e666ac4f85b01d271d59c6939252e04fd

    • Size

      161KB

    • MD5

      1c561efed5a3dcc85483d593d027e69b

    • SHA1

      3835ce7978cedfd2796aaa0bda1e8b2cd66ea8a8

    • SHA256

      6bc77a4ecaea730ab327ea7e4e31346e666ac4f85b01d271d59c6939252e04fd

    • SHA512

      08c5c15fd39fa79ceb8d8bbb30a6f6fa5c44783d59157deffc157e8aeda5b87df7c14d953c1fa6eae63be1aa69e69ab657242fd0bf3c467be2989fd57eac197e

    • SSDEEP

      3072:GySuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2DGkFY:rnS62Fl+pkeJl3CvRStrFl+EYS

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks