General

  • Target

    JaffaCakes118_7a04e9e8d27f963f487499eb1ff2c11cec6e6fde31063acaaffcd709590e05a2

  • Size

    161KB

  • Sample

    241225-r5j7eawjej

  • MD5

    d79e40c6907364781f3370c1bb963551

  • SHA1

    6d638056b810955f70462fe5bb684c7ae1352c7d

  • SHA256

    7a04e9e8d27f963f487499eb1ff2c11cec6e6fde31063acaaffcd709590e05a2

  • SHA512

    977d563acb4e7dd5f87946a01543baa0fe7863e93bc794417f73384fa1a1c90fd2e27aa4a54c45d598d9a3be16dd0e468c4a750935a511ad33682f460699e31c

  • SSDEEP

    3072:81Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:qnS62Fl+pkeJl3CvRStrFl+EYh

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7a04e9e8d27f963f487499eb1ff2c11cec6e6fde31063acaaffcd709590e05a2

    • Size

      161KB

    • MD5

      d79e40c6907364781f3370c1bb963551

    • SHA1

      6d638056b810955f70462fe5bb684c7ae1352c7d

    • SHA256

      7a04e9e8d27f963f487499eb1ff2c11cec6e6fde31063acaaffcd709590e05a2

    • SHA512

      977d563acb4e7dd5f87946a01543baa0fe7863e93bc794417f73384fa1a1c90fd2e27aa4a54c45d598d9a3be16dd0e468c4a750935a511ad33682f460699e31c

    • SSDEEP

      3072:81Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:qnS62Fl+pkeJl3CvRStrFl+EYh

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks