General

  • Target

    JaffaCakes118_c68b332960372686bd976c42a33917930e5d6e8a032320a903d80e1ba59a927f

  • Size

    161KB

  • Sample

    241225-f9lp9azjbp

  • MD5

    cf8448cc09ac0c46fd70dca001587010

  • SHA1

    dbf8e0b3974cc0dd1346ecd6ccd92813b39a2067

  • SHA256

    c68b332960372686bd976c42a33917930e5d6e8a032320a903d80e1ba59a927f

  • SHA512

    93a71942dc7f086cd0fcb32215c78be52756ae6e984160737531c06cef21cb704f2b446b50b2288c2e0dbc7576a8941dafb6c6e09cdd3a4fd0cd9eb17808db38

  • SSDEEP

    3072:MaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:hnS62Fl+pkeJl3CvRStrFl+EYE

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c68b332960372686bd976c42a33917930e5d6e8a032320a903d80e1ba59a927f

    • Size

      161KB

    • MD5

      cf8448cc09ac0c46fd70dca001587010

    • SHA1

      dbf8e0b3974cc0dd1346ecd6ccd92813b39a2067

    • SHA256

      c68b332960372686bd976c42a33917930e5d6e8a032320a903d80e1ba59a927f

    • SHA512

      93a71942dc7f086cd0fcb32215c78be52756ae6e984160737531c06cef21cb704f2b446b50b2288c2e0dbc7576a8941dafb6c6e09cdd3a4fd0cd9eb17808db38

    • SSDEEP

      3072:MaSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2BGkFY:hnS62Fl+pkeJl3CvRStrFl+EYE

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks