General

  • Target

    JaffaCakes118_d2c877e345af38caf160ba6fb10bb9ebaea77b1a6b9eccc6d219fd39dff00386

  • Size

    161KB

  • Sample

    241224-wz8p2atldx

  • MD5

    2376270c0a2e17945cb6f2be5723a778

  • SHA1

    99054c7dd83cd0ac0c559333cddd76f379147e14

  • SHA256

    d2c877e345af38caf160ba6fb10bb9ebaea77b1a6b9eccc6d219fd39dff00386

  • SHA512

    2420b29b276dc111ec3b179f06a4f74f4c3dc6783562c3a3a56f4bf86ce0ce6a6af3edd5b13419b9a03fb66e2239806bf3645b887861a4e335fd5b344f5ba349

  • SSDEEP

    3072:GnSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:WnS62Fl+pkeJl3CvRStrFl+EY0

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d2c877e345af38caf160ba6fb10bb9ebaea77b1a6b9eccc6d219fd39dff00386

    • Size

      161KB

    • MD5

      2376270c0a2e17945cb6f2be5723a778

    • SHA1

      99054c7dd83cd0ac0c559333cddd76f379147e14

    • SHA256

      d2c877e345af38caf160ba6fb10bb9ebaea77b1a6b9eccc6d219fd39dff00386

    • SHA512

      2420b29b276dc111ec3b179f06a4f74f4c3dc6783562c3a3a56f4bf86ce0ce6a6af3edd5b13419b9a03fb66e2239806bf3645b887861a4e335fd5b344f5ba349

    • SSDEEP

      3072:GnSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:WnS62Fl+pkeJl3CvRStrFl+EY0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks