General

  • Target

    JaffaCakes118_31519618bce6b956c792b3b25bbb5930cdf36d49e6a59b43f0faf45686553622

  • Size

    161KB

  • Sample

    241229-gnhl5svkam

  • MD5

    88a93df2e7e75cc5295cd942e86f104e

  • SHA1

    1605380d1028333af67cd336747521723679b600

  • SHA256

    31519618bce6b956c792b3b25bbb5930cdf36d49e6a59b43f0faf45686553622

  • SHA512

    cb6fc68bb9ba0800bd8cf10227fe229a9ac7256aa5d3d655c4d8bcb7a57ab626fb7c36aa794f6fbdcdb35780179ddd938dbc8f59d4534a3a03e77ac530eeb8ce

  • SSDEEP

    3072:ftSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:FnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_31519618bce6b956c792b3b25bbb5930cdf36d49e6a59b43f0faf45686553622

    • Size

      161KB

    • MD5

      88a93df2e7e75cc5295cd942e86f104e

    • SHA1

      1605380d1028333af67cd336747521723679b600

    • SHA256

      31519618bce6b956c792b3b25bbb5930cdf36d49e6a59b43f0faf45686553622

    • SHA512

      cb6fc68bb9ba0800bd8cf10227fe229a9ac7256aa5d3d655c4d8bcb7a57ab626fb7c36aa794f6fbdcdb35780179ddd938dbc8f59d4534a3a03e77ac530eeb8ce

    • SSDEEP

      3072:ftSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:FnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks