General

  • Target

    JaffaCakes118_739dce274a18c898bfd6da25a055097c0f7b725a10918af6cbfb225ce159ee49

  • Size

    161KB

  • Sample

    241223-zqa9ys1las

  • MD5

    3dd450f3b8dd287ce0ea67f625949c70

  • SHA1

    de0bb815881f37c83c20e14c9e409750854c1ec2

  • SHA256

    739dce274a18c898bfd6da25a055097c0f7b725a10918af6cbfb225ce159ee49

  • SHA512

    35fa66714b8e5a92b3c6cd0188f27defca982bf69161462c87ed5c510836c9654f7cc6228572cd7aeb5f89f892ccbd1cc85ae1ebdd5e0819fdd28165f246041f

  • SSDEEP

    3072:F1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd25GkFY:fnS62Fl+pkeJl3CvRStrFl+EYs

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_739dce274a18c898bfd6da25a055097c0f7b725a10918af6cbfb225ce159ee49

    • Size

      161KB

    • MD5

      3dd450f3b8dd287ce0ea67f625949c70

    • SHA1

      de0bb815881f37c83c20e14c9e409750854c1ec2

    • SHA256

      739dce274a18c898bfd6da25a055097c0f7b725a10918af6cbfb225ce159ee49

    • SHA512

      35fa66714b8e5a92b3c6cd0188f27defca982bf69161462c87ed5c510836c9654f7cc6228572cd7aeb5f89f892ccbd1cc85ae1ebdd5e0819fdd28165f246041f

    • SSDEEP

      3072:F1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd25GkFY:fnS62Fl+pkeJl3CvRStrFl+EYs

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks