General

  • Target

    JaffaCakes118_ed596facaadcbbb08904439f1c19a10f0c91a3e300586bdee84f1ef6840e0371

  • Size

    161KB

  • Sample

    241223-wva8zaxjdn

  • MD5

    be8c37c3c6baa95642f34f5cfa03535c

  • SHA1

    ade082a5c2f507481a97852cc35643bdc362a9dd

  • SHA256

    ed596facaadcbbb08904439f1c19a10f0c91a3e300586bdee84f1ef6840e0371

  • SHA512

    5c5cc3c4b2018dcb2736f65c5dd58e3dd879ba5a56abe01511bea3873dd61203e1d3cbcb10059a520f0dd138687bee279254ca4e68cae7e51811a5d938f3e017

  • SSDEEP

    3072:hnSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:5nS62Fl+pkeJl3CvRStrFl+EY0

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ed596facaadcbbb08904439f1c19a10f0c91a3e300586bdee84f1ef6840e0371

    • Size

      161KB

    • MD5

      be8c37c3c6baa95642f34f5cfa03535c

    • SHA1

      ade082a5c2f507481a97852cc35643bdc362a9dd

    • SHA256

      ed596facaadcbbb08904439f1c19a10f0c91a3e300586bdee84f1ef6840e0371

    • SHA512

      5c5cc3c4b2018dcb2736f65c5dd58e3dd879ba5a56abe01511bea3873dd61203e1d3cbcb10059a520f0dd138687bee279254ca4e68cae7e51811a5d938f3e017

    • SSDEEP

      3072:hnSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:5nS62Fl+pkeJl3CvRStrFl+EY0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks