General

  • Target

    JaffaCakes118_185cdb408e8400b33e3c187cdf607391dd3a593a7882ab0db8110d6e7501e7c8

  • Size

    161KB

  • Sample

    241223-zzd27s1pdr

  • MD5

    d4a26e6a6bd00969f5c36e49cf258c16

  • SHA1

    abb2b6f3a495bfb79a72afe5cd3cdc0d6ac805aa

  • SHA256

    185cdb408e8400b33e3c187cdf607391dd3a593a7882ab0db8110d6e7501e7c8

  • SHA512

    4dbc5eaf8207abf366ed65948599cb97dbae267f39f84794bed20c23af462bb7771b60321b1b554134f8e9f8a7e4a157ea96dc8e10993b8d32a117b9ba7f46aa

  • SSDEEP

    3072:wPSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd27GkFY:MnS62Fl+pkeJl3CvRStrFl+EYa

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_185cdb408e8400b33e3c187cdf607391dd3a593a7882ab0db8110d6e7501e7c8

    • Size

      161KB

    • MD5

      d4a26e6a6bd00969f5c36e49cf258c16

    • SHA1

      abb2b6f3a495bfb79a72afe5cd3cdc0d6ac805aa

    • SHA256

      185cdb408e8400b33e3c187cdf607391dd3a593a7882ab0db8110d6e7501e7c8

    • SHA512

      4dbc5eaf8207abf366ed65948599cb97dbae267f39f84794bed20c23af462bb7771b60321b1b554134f8e9f8a7e4a157ea96dc8e10993b8d32a117b9ba7f46aa

    • SSDEEP

      3072:wPSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd27GkFY:MnS62Fl+pkeJl3CvRStrFl+EYa

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks