General

  • Target

    JaffaCakes118_158ee45e5fb28f1046c646199e7944b4f7e840f6e6ce6801eebbced859042b9a

  • Size

    161KB

  • Sample

    241224-be8t3sxmfn

  • MD5

    f8359869ba064d458af1b87693613c0b

  • SHA1

    84a94ead3ef0f404c8f5c7a479682ea50ed73f6d

  • SHA256

    158ee45e5fb28f1046c646199e7944b4f7e840f6e6ce6801eebbced859042b9a

  • SHA512

    a5adef16c8a7d780cd04ab1180d95440f34c855bd4ca81643a3e01714430cd4005f534a98294dae1e9fda191eaf84995901cbf32f2a5d8be6d6c75fbc90db9e5

  • SSDEEP

    3072:zoSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:snS62Fl+pkeJl3CvRStrFl+EYn

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_158ee45e5fb28f1046c646199e7944b4f7e840f6e6ce6801eebbced859042b9a

    • Size

      161KB

    • MD5

      f8359869ba064d458af1b87693613c0b

    • SHA1

      84a94ead3ef0f404c8f5c7a479682ea50ed73f6d

    • SHA256

      158ee45e5fb28f1046c646199e7944b4f7e840f6e6ce6801eebbced859042b9a

    • SHA512

      a5adef16c8a7d780cd04ab1180d95440f34c855bd4ca81643a3e01714430cd4005f534a98294dae1e9fda191eaf84995901cbf32f2a5d8be6d6c75fbc90db9e5

    • SSDEEP

      3072:zoSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:snS62Fl+pkeJl3CvRStrFl+EYn

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks