General

  • Target

    JaffaCakes118_7790f417633adc47d7b1970ac94ad07b17383d44d6ab5e9dceffeac0a13c047a

  • Size

    161KB

  • Sample

    241224-dc7kcazqdl

  • MD5

    e50818ddf43350a68923b43898206e04

  • SHA1

    5ebaf6afe7733d5cb4dec7cff9304e8698a38931

  • SHA256

    7790f417633adc47d7b1970ac94ad07b17383d44d6ab5e9dceffeac0a13c047a

  • SHA512

    885837429ae643e244bb942b9fb0c2ee9c024c92c155edc70c1fab2a9512ebbf7d225feb066f4c3906475ce653d9329c5d3afcab8be77df68079e32b73f98562

  • SSDEEP

    3072:1aSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:InS62Fl+pkeJl3CvRStrFl+EYE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7790f417633adc47d7b1970ac94ad07b17383d44d6ab5e9dceffeac0a13c047a

    • Size

      161KB

    • MD5

      e50818ddf43350a68923b43898206e04

    • SHA1

      5ebaf6afe7733d5cb4dec7cff9304e8698a38931

    • SHA256

      7790f417633adc47d7b1970ac94ad07b17383d44d6ab5e9dceffeac0a13c047a

    • SHA512

      885837429ae643e244bb942b9fb0c2ee9c024c92c155edc70c1fab2a9512ebbf7d225feb066f4c3906475ce653d9329c5d3afcab8be77df68079e32b73f98562

    • SSDEEP

      3072:1aSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:InS62Fl+pkeJl3CvRStrFl+EYE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks