General

  • Target

    JaffaCakes118_8c59628c9b691ebdb16692e662ad751ab6fec731d3a1eadd653c692cdce938eb

  • Size

    161KB

  • Sample

    241225-t35rfaynhr

  • MD5

    e8446afa85daa8b6506aec3c60f904d0

  • SHA1

    2ae0317f1b1bad5f3b298220254ef170dff8ef97

  • SHA256

    8c59628c9b691ebdb16692e662ad751ab6fec731d3a1eadd653c692cdce938eb

  • SHA512

    ec92e540f8a7ebee7082fb04f28645de601ffe7a7b8a28164042eae3a4a7e390698df04d948da4cb56a7a38abfcd28350784c0da70fa0cfdf4b765ade3ae7923

  • SSDEEP

    3072:VZSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd21GkFY:bnS62Fl+pkeJl3CvRStrFl+EY4

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8c59628c9b691ebdb16692e662ad751ab6fec731d3a1eadd653c692cdce938eb

    • Size

      161KB

    • MD5

      e8446afa85daa8b6506aec3c60f904d0

    • SHA1

      2ae0317f1b1bad5f3b298220254ef170dff8ef97

    • SHA256

      8c59628c9b691ebdb16692e662ad751ab6fec731d3a1eadd653c692cdce938eb

    • SHA512

      ec92e540f8a7ebee7082fb04f28645de601ffe7a7b8a28164042eae3a4a7e390698df04d948da4cb56a7a38abfcd28350784c0da70fa0cfdf4b765ade3ae7923

    • SSDEEP

      3072:VZSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd21GkFY:bnS62Fl+pkeJl3CvRStrFl+EY4

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks