General

  • Target

    JaffaCakes118_f987fcdd0ac5edb04d33297229a6996852f5e2628c0627b8fc8524b57bfcac89

  • Size

    161KB

  • Sample

    241225-aydmlsslfm

  • MD5

    11e746e81646798465f375fbf6ea6685

  • SHA1

    86f2f6dc4db7086d7bf2b8a99f55908ca76f59af

  • SHA256

    f987fcdd0ac5edb04d33297229a6996852f5e2628c0627b8fc8524b57bfcac89

  • SHA512

    0143bb5b0bbeefb388788f40ae7a1c1c49fa937d41d83bb7a2f06f31717b551f2f0570ff1a70a8cfd26ddb9ee2b2b0a259fcb5855fa23b39e79a2ff99ae52f83

  • SSDEEP

    3072:aoSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:hnS62Fl+pkeJl3CvRStrFl+EYn

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f987fcdd0ac5edb04d33297229a6996852f5e2628c0627b8fc8524b57bfcac89

    • Size

      161KB

    • MD5

      11e746e81646798465f375fbf6ea6685

    • SHA1

      86f2f6dc4db7086d7bf2b8a99f55908ca76f59af

    • SHA256

      f987fcdd0ac5edb04d33297229a6996852f5e2628c0627b8fc8524b57bfcac89

    • SHA512

      0143bb5b0bbeefb388788f40ae7a1c1c49fa937d41d83bb7a2f06f31717b551f2f0570ff1a70a8cfd26ddb9ee2b2b0a259fcb5855fa23b39e79a2ff99ae52f83

    • SSDEEP

      3072:aoSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:hnS62Fl+pkeJl3CvRStrFl+EYn

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks