General

  • Target

    JaffaCakes118_41eab784a78fe3d2b6e4a0482361082a3b543797402a03d4dc5ac278f4442938

  • Size

    161KB

  • Sample

    241229-3qxdza1jes

  • MD5

    aa7540c8d49029f4d4243db18d40bbd4

  • SHA1

    bb5d05aeba707a01d28cbf96f3b3a332a20d4f93

  • SHA256

    41eab784a78fe3d2b6e4a0482361082a3b543797402a03d4dc5ac278f4442938

  • SHA512

    81daf7773bdaac7a5535163d24c80510fd61144eae6c6c8f2e51e8cc776e7bd97df896a4b4f932b05cf951bbaab45f24927bf64760b6c0485f2962a84a60b6c2

  • SSDEEP

    3072:xtSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:LnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_41eab784a78fe3d2b6e4a0482361082a3b543797402a03d4dc5ac278f4442938

    • Size

      161KB

    • MD5

      aa7540c8d49029f4d4243db18d40bbd4

    • SHA1

      bb5d05aeba707a01d28cbf96f3b3a332a20d4f93

    • SHA256

      41eab784a78fe3d2b6e4a0482361082a3b543797402a03d4dc5ac278f4442938

    • SHA512

      81daf7773bdaac7a5535163d24c80510fd61144eae6c6c8f2e51e8cc776e7bd97df896a4b4f932b05cf951bbaab45f24927bf64760b6c0485f2962a84a60b6c2

    • SSDEEP

      3072:xtSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:LnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks