General

  • Target

    JaffaCakes118_f841d383895dfefe8bf83184510447b5ab78e0f2755fa4eac09349d789577a3e

  • Size

    161KB

  • Sample

    241224-y3wkzswnbz

  • MD5

    554ff15e0eec6f782832b32245ab9653

  • SHA1

    cc34e416818f9580d8c8db23749a951a2cc89975

  • SHA256

    f841d383895dfefe8bf83184510447b5ab78e0f2755fa4eac09349d789577a3e

  • SHA512

    256bb9de8ad2bc576a1b607f23c3dfe7877eafa3c5a32fc7ffec9c4f8103b930192e21404597d8c6c2e3800dcde487bc644d9514fb14b852eb1dc43c3028c0c5

  • SSDEEP

    3072:iZSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd21GkFY:YnS62Fl+pkeJl3CvRStrFl+EY4

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f841d383895dfefe8bf83184510447b5ab78e0f2755fa4eac09349d789577a3e

    • Size

      161KB

    • MD5

      554ff15e0eec6f782832b32245ab9653

    • SHA1

      cc34e416818f9580d8c8db23749a951a2cc89975

    • SHA256

      f841d383895dfefe8bf83184510447b5ab78e0f2755fa4eac09349d789577a3e

    • SHA512

      256bb9de8ad2bc576a1b607f23c3dfe7877eafa3c5a32fc7ffec9c4f8103b930192e21404597d8c6c2e3800dcde487bc644d9514fb14b852eb1dc43c3028c0c5

    • SSDEEP

      3072:iZSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd21GkFY:YnS62Fl+pkeJl3CvRStrFl+EY4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks