General

  • Target

    JaffaCakes118_ff350d505f1619e84beac29538c58ac440d408ee9bb0c850688526dfb08fa1b6

  • Size

    161KB

  • Sample

    241225-gvsexszmhp

  • MD5

    ac7034347b3ea347931e20b4154ccf42

  • SHA1

    08f008f1b93f4104c4d1a554500a4eaa44f01af9

  • SHA256

    ff350d505f1619e84beac29538c58ac440d408ee9bb0c850688526dfb08fa1b6

  • SHA512

    8fe658875b867c9840b114495e2248f8fc51e0d2b1c25d5f545a10e9d4a1c3307728ff44351455eaf3a4703cf6f4238868baba9eb1a38a7fd2e4acc86637948a

  • SSDEEP

    3072:ltSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:fnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ff350d505f1619e84beac29538c58ac440d408ee9bb0c850688526dfb08fa1b6

    • Size

      161KB

    • MD5

      ac7034347b3ea347931e20b4154ccf42

    • SHA1

      08f008f1b93f4104c4d1a554500a4eaa44f01af9

    • SHA256

      ff350d505f1619e84beac29538c58ac440d408ee9bb0c850688526dfb08fa1b6

    • SHA512

      8fe658875b867c9840b114495e2248f8fc51e0d2b1c25d5f545a10e9d4a1c3307728ff44351455eaf3a4703cf6f4238868baba9eb1a38a7fd2e4acc86637948a

    • SSDEEP

      3072:ltSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:fnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks