General

  • Target

    JaffaCakes118_6ac3c2800843e649369d0c02eb3712fcf81755061bc09d261af0b79873a78440

  • Size

    161KB

  • Sample

    241223-qmjbqazrf1

  • MD5

    dcb3e34843d5ed628fd73486deac322c

  • SHA1

    c83a5244b30b93ebe5a16d8c56d9198b508d43d7

  • SHA256

    6ac3c2800843e649369d0c02eb3712fcf81755061bc09d261af0b79873a78440

  • SHA512

    53b1305c9e32d368204a5c7655c5218f0b478915068248a98d1667eb581ae59eb57a6aa549c50287e4fbbe08f6ccba18de0258a0391a499ea9f65b3c88f46eda

  • SSDEEP

    3072:41Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:mnS62Fl+pkeJl3CvRStrFl+EYh

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_6ac3c2800843e649369d0c02eb3712fcf81755061bc09d261af0b79873a78440

    • Size

      161KB

    • MD5

      dcb3e34843d5ed628fd73486deac322c

    • SHA1

      c83a5244b30b93ebe5a16d8c56d9198b508d43d7

    • SHA256

      6ac3c2800843e649369d0c02eb3712fcf81755061bc09d261af0b79873a78440

    • SHA512

      53b1305c9e32d368204a5c7655c5218f0b478915068248a98d1667eb581ae59eb57a6aa549c50287e4fbbe08f6ccba18de0258a0391a499ea9f65b3c88f46eda

    • SSDEEP

      3072:41Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:mnS62Fl+pkeJl3CvRStrFl+EYh

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks