General

  • Target

    JaffaCakes118_4b9cc2bbe948368fe7437aa58ab112fd18e843bba8fcb5eb8ba793008c6409c1

  • Size

    161KB

  • Sample

    241224-pwjheaxmf1

  • MD5

    0b858d21cfbcac32f5f51e64e0627f66

  • SHA1

    385fdaabaab51709d5102d51da9b0ef6791fe1eb

  • SHA256

    4b9cc2bbe948368fe7437aa58ab112fd18e843bba8fcb5eb8ba793008c6409c1

  • SHA512

    f0f8183e8629a1c1af865285c190084a65bf3de3b5ac74ede1423645ddd1de601aabe5b7c85b92dd9919d08531cc0d7173cb9fc964c69c2a05df506313e86efa

  • SSDEEP

    3072:QPSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd27GkFY:snS62Fl+pkeJl3CvRStrFl+EYa

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4b9cc2bbe948368fe7437aa58ab112fd18e843bba8fcb5eb8ba793008c6409c1

    • Size

      161KB

    • MD5

      0b858d21cfbcac32f5f51e64e0627f66

    • SHA1

      385fdaabaab51709d5102d51da9b0ef6791fe1eb

    • SHA256

      4b9cc2bbe948368fe7437aa58ab112fd18e843bba8fcb5eb8ba793008c6409c1

    • SHA512

      f0f8183e8629a1c1af865285c190084a65bf3de3b5ac74ede1423645ddd1de601aabe5b7c85b92dd9919d08531cc0d7173cb9fc964c69c2a05df506313e86efa

    • SSDEEP

      3072:QPSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd27GkFY:snS62Fl+pkeJl3CvRStrFl+EYa

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks