General

  • Target

    JaffaCakes118_599cd07c66ebc3e1285cf60944734b560160a1b7e8e0933e9a649189fc946919

  • Size

    161KB

  • Sample

    241225-b7cx4stmcs

  • MD5

    9e7c85723c0f946a9a066532d2925649

  • SHA1

    a7f6a130d0a7839e227d3ff37b0158138365488f

  • SHA256

    599cd07c66ebc3e1285cf60944734b560160a1b7e8e0933e9a649189fc946919

  • SHA512

    ddd4cefb86ec58922079ca0df6c39ea0c3da0049ce99c4c54745e5d3418d13e54454479298f6b1d3ffdf33c95aa0924f6e8f40a3750d8b7d0cf49fdb0ece4303

  • SSDEEP

    3072:soSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:znS62Fl+pkeJl3CvRStrFl+EYn

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_599cd07c66ebc3e1285cf60944734b560160a1b7e8e0933e9a649189fc946919

    • Size

      161KB

    • MD5

      9e7c85723c0f946a9a066532d2925649

    • SHA1

      a7f6a130d0a7839e227d3ff37b0158138365488f

    • SHA256

      599cd07c66ebc3e1285cf60944734b560160a1b7e8e0933e9a649189fc946919

    • SHA512

      ddd4cefb86ec58922079ca0df6c39ea0c3da0049ce99c4c54745e5d3418d13e54454479298f6b1d3ffdf33c95aa0924f6e8f40a3750d8b7d0cf49fdb0ece4303

    • SSDEEP

      3072:soSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2aGkFY:znS62Fl+pkeJl3CvRStrFl+EYn

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks