General

  • Target

    JaffaCakes118_4ab6badb430369040162e1892080b9cef307a5bdd5d5902f9fb4c9f329070e6f

  • Size

    161KB

  • Sample

    241230-1rn3watjf1

  • MD5

    33fa7a6415f4a2f08d9a6c824b1da986

  • SHA1

    f1d7cff4515c20f475ebf0f3798d4a2c73a372d9

  • SHA256

    4ab6badb430369040162e1892080b9cef307a5bdd5d5902f9fb4c9f329070e6f

  • SHA512

    00b2a4c6abbc69a29d3613a607c55f7019c761ae438d727d59e91069c93cc5bb8d38bedcb71747ff65bbb72b77dbaa595280536cad2cee0d43cb792793ff5d20

  • SSDEEP

    3072:JtSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:DnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4ab6badb430369040162e1892080b9cef307a5bdd5d5902f9fb4c9f329070e6f

    • Size

      161KB

    • MD5

      33fa7a6415f4a2f08d9a6c824b1da986

    • SHA1

      f1d7cff4515c20f475ebf0f3798d4a2c73a372d9

    • SHA256

      4ab6badb430369040162e1892080b9cef307a5bdd5d5902f9fb4c9f329070e6f

    • SHA512

      00b2a4c6abbc69a29d3613a607c55f7019c761ae438d727d59e91069c93cc5bb8d38bedcb71747ff65bbb72b77dbaa595280536cad2cee0d43cb792793ff5d20

    • SSDEEP

      3072:JtSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:DnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks