General

  • Target

    JaffaCakes118_d09c650ba3b29d26f06ef92c4b232ec1817583775210e75d26aac630c1099b67

  • Size

    161KB

  • Sample

    241225-yv476awmbj

  • MD5

    726b0110620c29e9f84276e6e90c16c0

  • SHA1

    5d3ac038c785230ecc84c8263462044cf9e074aa

  • SHA256

    d09c650ba3b29d26f06ef92c4b232ec1817583775210e75d26aac630c1099b67

  • SHA512

    ba28c388c8f0ef88f77798f44691553e3540104b134367d490069e2cb68dfff0718f86036c3ccc69a38821e9aa4fde4e09d5c3ba653b0d3e68c3e7f588a4658a

  • SSDEEP

    3072:LtSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:RnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_d09c650ba3b29d26f06ef92c4b232ec1817583775210e75d26aac630c1099b67

    • Size

      161KB

    • MD5

      726b0110620c29e9f84276e6e90c16c0

    • SHA1

      5d3ac038c785230ecc84c8263462044cf9e074aa

    • SHA256

      d09c650ba3b29d26f06ef92c4b232ec1817583775210e75d26aac630c1099b67

    • SHA512

      ba28c388c8f0ef88f77798f44691553e3540104b134367d490069e2cb68dfff0718f86036c3ccc69a38821e9aa4fde4e09d5c3ba653b0d3e68c3e7f588a4658a

    • SSDEEP

      3072:LtSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:RnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks