General

  • Target

    JaffaCakes118_f658db45f113d7b22c727c3d188054a8ba0e2ef1ec7fcc7fc63dd1e94c8b3569

  • Size

    161KB

  • Sample

    241224-yl61dsvrht

  • MD5

    e4f70f21d10070946f1a09a7c56383e4

  • SHA1

    c1a25081c4bf20074495f7e906c9e0043a42a4eb

  • SHA256

    f658db45f113d7b22c727c3d188054a8ba0e2ef1ec7fcc7fc63dd1e94c8b3569

  • SHA512

    0aa3d1d6ba271668eb3bbd11cf7d881f8d21764dd15d52da5699c22b24df8f33ca8fe7c1481f7a70932fef9f092ec8f9324967c5b5a9ecd9225c169f6e95d488

  • SSDEEP

    3072:+aSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:bnS62Fl+pkeJl3CvRStrFl+EYE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f658db45f113d7b22c727c3d188054a8ba0e2ef1ec7fcc7fc63dd1e94c8b3569

    • Size

      161KB

    • MD5

      e4f70f21d10070946f1a09a7c56383e4

    • SHA1

      c1a25081c4bf20074495f7e906c9e0043a42a4eb

    • SHA256

      f658db45f113d7b22c727c3d188054a8ba0e2ef1ec7fcc7fc63dd1e94c8b3569

    • SHA512

      0aa3d1d6ba271668eb3bbd11cf7d881f8d21764dd15d52da5699c22b24df8f33ca8fe7c1481f7a70932fef9f092ec8f9324967c5b5a9ecd9225c169f6e95d488

    • SSDEEP

      3072:+aSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:bnS62Fl+pkeJl3CvRStrFl+EYE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks