General

  • Target

    JaffaCakes118_68607918ca30a825e0ba0ef1d309398d9f212cf9d8ef8d08e7994f70b447d661

  • Size

    161KB

  • Sample

    241225-yyzrvawkc1

  • MD5

    938e0c30c87b2faeb2d71e26359a1bbc

  • SHA1

    5e88452a038ceddfcade90ad2ae0f663abf0b5b1

  • SHA256

    68607918ca30a825e0ba0ef1d309398d9f212cf9d8ef8d08e7994f70b447d661

  • SHA512

    730d50d215ecd3404a69a970b917fcad78d392f7b583f796ed1fb3dcaacc83d565a7e9278d60882425b4761efc6422bfa4c5dfe47bbcadcca7f0f546378c76d2

  • SSDEEP

    3072:anSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:CnS62Fl+pkeJl3CvRStrFl+EY0

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_68607918ca30a825e0ba0ef1d309398d9f212cf9d8ef8d08e7994f70b447d661

    • Size

      161KB

    • MD5

      938e0c30c87b2faeb2d71e26359a1bbc

    • SHA1

      5e88452a038ceddfcade90ad2ae0f663abf0b5b1

    • SHA256

      68607918ca30a825e0ba0ef1d309398d9f212cf9d8ef8d08e7994f70b447d661

    • SHA512

      730d50d215ecd3404a69a970b917fcad78d392f7b583f796ed1fb3dcaacc83d565a7e9278d60882425b4761efc6422bfa4c5dfe47bbcadcca7f0f546378c76d2

    • SSDEEP

      3072:anSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:CnS62Fl+pkeJl3CvRStrFl+EY0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks