General

  • Target

    JaffaCakes118_cdf2f91f7eb24532807cd597e2213f1513b1b663199a9b13268cf464f40fe263

  • Size

    161KB

  • Sample

    241222-ybwrnsxlcp

  • MD5

    97868f284e87e4e84168f891f2095438

  • SHA1

    1945ef5b26287fe6a4e7c0a5bb6a5ff656accfbb

  • SHA256

    cdf2f91f7eb24532807cd597e2213f1513b1b663199a9b13268cf464f40fe263

  • SHA512

    cde3cd6aa8f676e3c5fd0ac02df559905deff1a744ac7ef2e9c645831c0d362a1e358212c69cd00ec305f549fd0d955479f66b162e999d841076027b648e1dcc

  • SSDEEP

    3072:5OSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2uGkFY:wnS62Fl+pkeJl3CvRStrFl+EYL

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_cdf2f91f7eb24532807cd597e2213f1513b1b663199a9b13268cf464f40fe263

    • Size

      161KB

    • MD5

      97868f284e87e4e84168f891f2095438

    • SHA1

      1945ef5b26287fe6a4e7c0a5bb6a5ff656accfbb

    • SHA256

      cdf2f91f7eb24532807cd597e2213f1513b1b663199a9b13268cf464f40fe263

    • SHA512

      cde3cd6aa8f676e3c5fd0ac02df559905deff1a744ac7ef2e9c645831c0d362a1e358212c69cd00ec305f549fd0d955479f66b162e999d841076027b648e1dcc

    • SSDEEP

      3072:5OSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2uGkFY:wnS62Fl+pkeJl3CvRStrFl+EYL

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks