General

  • Target

    JaffaCakes118_46aca30798c7116ef07c9483abc02d8522cb1271a0ab1b5b88ad502623ae0efd

  • Size

    161KB

  • Sample

    241226-vcjxqa1mcx

  • MD5

    bac6fbe6000023d14254b03342ac4cfd

  • SHA1

    818246ded808810e1c7697c06cd5468567696a91

  • SHA256

    46aca30798c7116ef07c9483abc02d8522cb1271a0ab1b5b88ad502623ae0efd

  • SHA512

    ed2adb66c9dc35a0ae3747d79616f62daa8824a0ffe3c3910d5d5b9b0a0985d03b1bc91d6285b47afcbce363816bc95197d3002ddc1296b1145e16b98c2fb10a

  • SSDEEP

    3072:otSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:GnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_46aca30798c7116ef07c9483abc02d8522cb1271a0ab1b5b88ad502623ae0efd

    • Size

      161KB

    • MD5

      bac6fbe6000023d14254b03342ac4cfd

    • SHA1

      818246ded808810e1c7697c06cd5468567696a91

    • SHA256

      46aca30798c7116ef07c9483abc02d8522cb1271a0ab1b5b88ad502623ae0efd

    • SHA512

      ed2adb66c9dc35a0ae3747d79616f62daa8824a0ffe3c3910d5d5b9b0a0985d03b1bc91d6285b47afcbce363816bc95197d3002ddc1296b1145e16b98c2fb10a

    • SSDEEP

      3072:otSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:GnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks