General

  • Target

    JaffaCakes118_21f5f9077aa1c1342feeff7bbac90137cc377a473963915952de4cc9be22e6d6

  • Size

    161KB

  • Sample

    241228-28q48svlbs

  • MD5

    ca2d41f6a94f68e4d1f5ad21ec84bc19

  • SHA1

    d88981b43553cd3535b16a929a10546540e54b50

  • SHA256

    21f5f9077aa1c1342feeff7bbac90137cc377a473963915952de4cc9be22e6d6

  • SHA512

    b218e420a7bb264f01d45f8c3b56ba06240eed5516375a5f59809b55d8b2909ec19422eabcc7361f6ace10c3b2cfbc5672a98a13376414340454aa919a74f284

  • SSDEEP

    3072:1nSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:1nS62Fl+pkeJl3CvRStrFl+EY0

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_21f5f9077aa1c1342feeff7bbac90137cc377a473963915952de4cc9be22e6d6

    • Size

      161KB

    • MD5

      ca2d41f6a94f68e4d1f5ad21ec84bc19

    • SHA1

      d88981b43553cd3535b16a929a10546540e54b50

    • SHA256

      21f5f9077aa1c1342feeff7bbac90137cc377a473963915952de4cc9be22e6d6

    • SHA512

      b218e420a7bb264f01d45f8c3b56ba06240eed5516375a5f59809b55d8b2909ec19422eabcc7361f6ace10c3b2cfbc5672a98a13376414340454aa919a74f284

    • SSDEEP

      3072:1nSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:1nS62Fl+pkeJl3CvRStrFl+EY0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks