General

  • Target

    JaffaCakes118_47d75d6e74dfc91229b5b6c0eb9c9d308dd3bce9c6f466675178b3e81148cd8a

  • Size

    161KB

  • Sample

    241226-wsehlstmgx

  • MD5

    428330ed40c3f2b45d0eeeb24277401a

  • SHA1

    e4126363da11fc696085e283dde1d385f00666d7

  • SHA256

    47d75d6e74dfc91229b5b6c0eb9c9d308dd3bce9c6f466675178b3e81148cd8a

  • SHA512

    e0f5c0f870c7f38cb23de3167ad4128c3b7e3cdf47a31227008f30c7a99458518e84b3f1191a2c508f452eba2b6f608a9ef300849982f7532f7c85cad01238fe

  • SSDEEP

    3072:9tSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:XnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_47d75d6e74dfc91229b5b6c0eb9c9d308dd3bce9c6f466675178b3e81148cd8a

    • Size

      161KB

    • MD5

      428330ed40c3f2b45d0eeeb24277401a

    • SHA1

      e4126363da11fc696085e283dde1d385f00666d7

    • SHA256

      47d75d6e74dfc91229b5b6c0eb9c9d308dd3bce9c6f466675178b3e81148cd8a

    • SHA512

      e0f5c0f870c7f38cb23de3167ad4128c3b7e3cdf47a31227008f30c7a99458518e84b3f1191a2c508f452eba2b6f608a9ef300849982f7532f7c85cad01238fe

    • SSDEEP

      3072:9tSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:XnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks