General

  • Target

    JaffaCakes118_902ad46035bd2309e8ea34b8fb45248592859067870145e9e5bbbae826d35af6

  • Size

    161KB

  • Sample

    241229-lw1j5synby

  • MD5

    202f80dbb038bf43fe01eec8702e36d1

  • SHA1

    bd406aa0bba9f107b44493d3c67e9674cb82abbd

  • SHA256

    902ad46035bd2309e8ea34b8fb45248592859067870145e9e5bbbae826d35af6

  • SHA512

    db157d438b69a449ff49d9db4de51342e9f64d082c9a51744a8a2786c992780a573a5eafb26cc550f01d56f6915f82c185c85ebe242de6ed8f995ea5044d5afa

  • SSDEEP

    3072:ljSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd28GkFY:tnS62Fl+pkeJl3CvRStrFl+EYN

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_902ad46035bd2309e8ea34b8fb45248592859067870145e9e5bbbae826d35af6

    • Size

      161KB

    • MD5

      202f80dbb038bf43fe01eec8702e36d1

    • SHA1

      bd406aa0bba9f107b44493d3c67e9674cb82abbd

    • SHA256

      902ad46035bd2309e8ea34b8fb45248592859067870145e9e5bbbae826d35af6

    • SHA512

      db157d438b69a449ff49d9db4de51342e9f64d082c9a51744a8a2786c992780a573a5eafb26cc550f01d56f6915f82c185c85ebe242de6ed8f995ea5044d5afa

    • SSDEEP

      3072:ljSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd28GkFY:tnS62Fl+pkeJl3CvRStrFl+EYN

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks