General

  • Target

    JaffaCakes118_f5ba102859b31024cc08e68e9f4ede35cb21bb8672aa4f9c9609cba08faa704b

  • Size

    161KB

  • Sample

    241224-bh4pjaxlhz

  • MD5

    7911f16fb7ab4d1d2b497d66b7239683

  • SHA1

    62ca53b79ff0986728a24d7544526ad33e4c38e9

  • SHA256

    f5ba102859b31024cc08e68e9f4ede35cb21bb8672aa4f9c9609cba08faa704b

  • SHA512

    dee047acd235e88feb4288e3942d466d564b75d1664e52e166841c0281f2a38fd56671e77cf1925d2d6c68727fe2a2aeb6292ff597f2b5f3b1bc79f17357ce07

  • SSDEEP

    3072:5lSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd28GkFY:vnS62Fl+pkeJl3CvRStrFl+EYN

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f5ba102859b31024cc08e68e9f4ede35cb21bb8672aa4f9c9609cba08faa704b

    • Size

      161KB

    • MD5

      7911f16fb7ab4d1d2b497d66b7239683

    • SHA1

      62ca53b79ff0986728a24d7544526ad33e4c38e9

    • SHA256

      f5ba102859b31024cc08e68e9f4ede35cb21bb8672aa4f9c9609cba08faa704b

    • SHA512

      dee047acd235e88feb4288e3942d466d564b75d1664e52e166841c0281f2a38fd56671e77cf1925d2d6c68727fe2a2aeb6292ff597f2b5f3b1bc79f17357ce07

    • SSDEEP

      3072:5lSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd28GkFY:vnS62Fl+pkeJl3CvRStrFl+EYN

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks