General

  • Target

    JaffaCakes118_bbfb00055df0fe64fd4620c1c909745cab6d08634bf106e79aeb588a415fb4e4

  • Size

    161KB

  • Sample

    241229-2ddwesymhx

  • MD5

    bd1dcca9dfc9f886c803561525d5cace

  • SHA1

    4c2ba395131ce86564bf874304d82dc248d94cf4

  • SHA256

    bbfb00055df0fe64fd4620c1c909745cab6d08634bf106e79aeb588a415fb4e4

  • SHA512

    4f461a3be3ed006b53272e4852710d27d450fc938851158ab8003765584d6603952bfcefc2d80d0442cad466c6322c61da1dc93fc6471d4442c3e75a63033f4a

  • SSDEEP

    3072:WgSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2ZGkFY:FnS62Fl+pkeJl3CvRStrFl+EYM

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_bbfb00055df0fe64fd4620c1c909745cab6d08634bf106e79aeb588a415fb4e4

    • Size

      161KB

    • MD5

      bd1dcca9dfc9f886c803561525d5cace

    • SHA1

      4c2ba395131ce86564bf874304d82dc248d94cf4

    • SHA256

      bbfb00055df0fe64fd4620c1c909745cab6d08634bf106e79aeb588a415fb4e4

    • SHA512

      4f461a3be3ed006b53272e4852710d27d450fc938851158ab8003765584d6603952bfcefc2d80d0442cad466c6322c61da1dc93fc6471d4442c3e75a63033f4a

    • SSDEEP

      3072:WgSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2ZGkFY:FnS62Fl+pkeJl3CvRStrFl+EYM

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks