General

  • Target

    JaffaCakes118_a29d638e31d371c1d44229696fd763ebedb0476702b3d51c18f44515645d3f5a

  • Size

    161KB

  • Sample

    241224-bly88axmht

  • MD5

    211f7ffb3db0230a15f80f0e1d17da7a

  • SHA1

    0de1c772b0344ed320874255af6fc5e5424184ec

  • SHA256

    a29d638e31d371c1d44229696fd763ebedb0476702b3d51c18f44515645d3f5a

  • SHA512

    a67b1e8344009662e6b675065fea7824c2a9873dfdc5710ad43a70b413b761126bb9d7e98f44d640f137fdc5ee6bbb6b588119e0f26d80470e8e7ec5c5dfa797

  • SSDEEP

    3072:FaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:4nS62Fl+pkeJl3CvRStrFl+EYE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a29d638e31d371c1d44229696fd763ebedb0476702b3d51c18f44515645d3f5a

    • Size

      161KB

    • MD5

      211f7ffb3db0230a15f80f0e1d17da7a

    • SHA1

      0de1c772b0344ed320874255af6fc5e5424184ec

    • SHA256

      a29d638e31d371c1d44229696fd763ebedb0476702b3d51c18f44515645d3f5a

    • SHA512

      a67b1e8344009662e6b675065fea7824c2a9873dfdc5710ad43a70b413b761126bb9d7e98f44d640f137fdc5ee6bbb6b588119e0f26d80470e8e7ec5c5dfa797

    • SSDEEP

      3072:FaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:4nS62Fl+pkeJl3CvRStrFl+EYE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks