General

  • Target

    JaffaCakes118_5df3ae10207eeef821d657692b95d8e209c88b577d9bcfd4dff6b27318a82a84

  • Size

    161KB

  • Sample

    241225-pl1c6sspc1

  • MD5

    1a25522d46a43628800f3c12bacb74ae

  • SHA1

    1fff68fc9a31aa91fdab6bc3d1e63e703244c477

  • SHA256

    5df3ae10207eeef821d657692b95d8e209c88b577d9bcfd4dff6b27318a82a84

  • SHA512

    42b5959a68412bea7f09a6287b3d79ebb3310b01775df84f55219bc73cfbf64ead21b0121213634268dbd3a118ed6adc6213a1378efaceb6a75e0b7376aca87d

  • SSDEEP

    3072:A1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:OnS62Fl+pkeJl3CvRStrFl+EYh

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_5df3ae10207eeef821d657692b95d8e209c88b577d9bcfd4dff6b27318a82a84

    • Size

      161KB

    • MD5

      1a25522d46a43628800f3c12bacb74ae

    • SHA1

      1fff68fc9a31aa91fdab6bc3d1e63e703244c477

    • SHA256

      5df3ae10207eeef821d657692b95d8e209c88b577d9bcfd4dff6b27318a82a84

    • SHA512

      42b5959a68412bea7f09a6287b3d79ebb3310b01775df84f55219bc73cfbf64ead21b0121213634268dbd3a118ed6adc6213a1378efaceb6a75e0b7376aca87d

    • SSDEEP

      3072:A1Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:OnS62Fl+pkeJl3CvRStrFl+EYh

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks