General

  • Target

    JaffaCakes118_8fdcd528d8695ff7ed0afbe9a513f980d778707f28e62a80f18ec22156f61e4f

  • Size

    161KB

  • Sample

    241224-vl3fessmbv

  • MD5

    6ebc3beb28c63c24652cbf410835a8ed

  • SHA1

    1e488f2757022c901ecd6d2ca4652b43bce5ebc3

  • SHA256

    8fdcd528d8695ff7ed0afbe9a513f980d778707f28e62a80f18ec22156f61e4f

  • SHA512

    02ac33694953427df81787fde8a753d9187ae5ada4d8b1c96ce4d60b47c3f3ca989369fcb768668c5053b2e527d7e8125ae88fc61070150ac46a1c86d9695b56

  • SSDEEP

    3072:ntSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:tnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8fdcd528d8695ff7ed0afbe9a513f980d778707f28e62a80f18ec22156f61e4f

    • Size

      161KB

    • MD5

      6ebc3beb28c63c24652cbf410835a8ed

    • SHA1

      1e488f2757022c901ecd6d2ca4652b43bce5ebc3

    • SHA256

      8fdcd528d8695ff7ed0afbe9a513f980d778707f28e62a80f18ec22156f61e4f

    • SHA512

      02ac33694953427df81787fde8a753d9187ae5ada4d8b1c96ce4d60b47c3f3ca989369fcb768668c5053b2e527d7e8125ae88fc61070150ac46a1c86d9695b56

    • SSDEEP

      3072:ntSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:tnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks