General

  • Target

    JaffaCakes118_351eb340df0a71fba3ef2ef2b243c8bedb6dc15d6bbb7bd7f100143f123f669e

  • Size

    161KB

  • Sample

    241229-dszjns1lax

  • MD5

    e1fc3c1ce9369df229c759a7aeea5501

  • SHA1

    93ccd514178adc5321654927bd9ae1ee6e39339e

  • SHA256

    351eb340df0a71fba3ef2ef2b243c8bedb6dc15d6bbb7bd7f100143f123f669e

  • SHA512

    8ee77c4b2200780adfc7831caeeb260108608d6da9381e72405ffb0b0ddb9d4ae2519b8fd627de0251b19c2605bbf78f63ea9d2dce8953a23783c5cf55ced805

  • SSDEEP

    3072:9nSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:NnS62Fl+pkeJl3CvRStrFl+EY0

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_351eb340df0a71fba3ef2ef2b243c8bedb6dc15d6bbb7bd7f100143f123f669e

    • Size

      161KB

    • MD5

      e1fc3c1ce9369df229c759a7aeea5501

    • SHA1

      93ccd514178adc5321654927bd9ae1ee6e39339e

    • SHA256

      351eb340df0a71fba3ef2ef2b243c8bedb6dc15d6bbb7bd7f100143f123f669e

    • SHA512

      8ee77c4b2200780adfc7831caeeb260108608d6da9381e72405ffb0b0ddb9d4ae2519b8fd627de0251b19c2605bbf78f63ea9d2dce8953a23783c5cf55ced805

    • SSDEEP

      3072:9nSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2xGkFY:NnS62Fl+pkeJl3CvRStrFl+EY0

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks