General

  • Target

    JaffaCakes118_27ac6684771a648990bcfa2f3b8419226318d5c7bcb4be71ae182e03e5577ac8

  • Size

    161KB

  • Sample

    241223-1566lstja1

  • MD5

    70fdae54d8a0f87d7a9145914a62acb1

  • SHA1

    47d81fd1c2fe1b743097640a6a80a12686b46304

  • SHA256

    27ac6684771a648990bcfa2f3b8419226318d5c7bcb4be71ae182e03e5577ac8

  • SHA512

    5d963702057b214c7737b6910f764834184ec94569df0d3d94fc0960d88e9ea608afb3ad3ea7f8a4460ee337b2e57f93c065498fd13a88124dede6d5cc4e74df

  • SSDEEP

    3072:x1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd25GkFY:LnS62Fl+pkeJl3CvRStrFl+EYs

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_27ac6684771a648990bcfa2f3b8419226318d5c7bcb4be71ae182e03e5577ac8

    • Size

      161KB

    • MD5

      70fdae54d8a0f87d7a9145914a62acb1

    • SHA1

      47d81fd1c2fe1b743097640a6a80a12686b46304

    • SHA256

      27ac6684771a648990bcfa2f3b8419226318d5c7bcb4be71ae182e03e5577ac8

    • SHA512

      5d963702057b214c7737b6910f764834184ec94569df0d3d94fc0960d88e9ea608afb3ad3ea7f8a4460ee337b2e57f93c065498fd13a88124dede6d5cc4e74df

    • SSDEEP

      3072:x1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd25GkFY:LnS62Fl+pkeJl3CvRStrFl+EYs

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks