General

  • Target

    JaffaCakes118_adda77afb903099dcafd62b4c542bcd6374fd56a034066ce3460904d7d03c54b

  • Size

    161KB

  • Sample

    241229-azxrwaxkbn

  • MD5

    f042b74cee24b9420c9d5dfea9d911f5

  • SHA1

    05654715fec3feaaefbdceed76ac0853b8d19683

  • SHA256

    adda77afb903099dcafd62b4c542bcd6374fd56a034066ce3460904d7d03c54b

  • SHA512

    92a420ecfcebe27e4d62ff89e65d413daea1b4e4d7603e0c8da0b39234da67d709eb48567f34bcbf84e04bec5c1aa6465799d6094738646b7cdea1c7dd21dc0d

  • SSDEEP

    3072:9tSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:XnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_adda77afb903099dcafd62b4c542bcd6374fd56a034066ce3460904d7d03c54b

    • Size

      161KB

    • MD5

      f042b74cee24b9420c9d5dfea9d911f5

    • SHA1

      05654715fec3feaaefbdceed76ac0853b8d19683

    • SHA256

      adda77afb903099dcafd62b4c542bcd6374fd56a034066ce3460904d7d03c54b

    • SHA512

      92a420ecfcebe27e4d62ff89e65d413daea1b4e4d7603e0c8da0b39234da67d709eb48567f34bcbf84e04bec5c1aa6465799d6094738646b7cdea1c7dd21dc0d

    • SSDEEP

      3072:9tSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:XnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks