General

  • Target

    JaffaCakes118_120d239f6153b040771eab1c441ef5c1ca928d611ba3c789d60b3336ae5e37ff

  • Size

    161KB

  • Sample

    241225-v6p1tszqbz

  • MD5

    289a2410b16d67f0978cc18f9746a146

  • SHA1

    b4e77be821acfbe9f00970a18bac2edcbbbb24ca

  • SHA256

    120d239f6153b040771eab1c441ef5c1ca928d611ba3c789d60b3336ae5e37ff

  • SHA512

    72ab4f10e75cd723b440b73d07167f247bdb626257c15b87716b2225b075ea20a77af4ca8da24dfdf5045f94791b274a9399f98b65b32855e76165607cbab8d7

  • SSDEEP

    3072:vgSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2ZGkFY:InS62Fl+pkeJl3CvRStrFl+EYM

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_120d239f6153b040771eab1c441ef5c1ca928d611ba3c789d60b3336ae5e37ff

    • Size

      161KB

    • MD5

      289a2410b16d67f0978cc18f9746a146

    • SHA1

      b4e77be821acfbe9f00970a18bac2edcbbbb24ca

    • SHA256

      120d239f6153b040771eab1c441ef5c1ca928d611ba3c789d60b3336ae5e37ff

    • SHA512

      72ab4f10e75cd723b440b73d07167f247bdb626257c15b87716b2225b075ea20a77af4ca8da24dfdf5045f94791b274a9399f98b65b32855e76165607cbab8d7

    • SSDEEP

      3072:vgSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2ZGkFY:InS62Fl+pkeJl3CvRStrFl+EYM

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks