General

  • Target

    JaffaCakes118_90db97318413a416308635b8e91fe814a48eb8d6bf55f5c2ad0170ec9d1a7608

  • Size

    161KB

  • Sample

    241230-3n3g7strcq

  • MD5

    4a823cf3da54f3399984a5a228a9238b

  • SHA1

    8148257c5f1fe4b4ed384e5ee8b0048d437d9873

  • SHA256

    90db97318413a416308635b8e91fe814a48eb8d6bf55f5c2ad0170ec9d1a7608

  • SHA512

    734377f9e1f8810d4bf1705918b750a2ceac7ffa344c0576955a5b263453e02897003318159136638d52218cd8d242149d9be6d828b68e2192a53820a30ab9ea

  • SSDEEP

    3072:/tSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:lnS62Fl+pkeJl3CvRStrFl+EYi

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_90db97318413a416308635b8e91fe814a48eb8d6bf55f5c2ad0170ec9d1a7608

    • Size

      161KB

    • MD5

      4a823cf3da54f3399984a5a228a9238b

    • SHA1

      8148257c5f1fe4b4ed384e5ee8b0048d437d9873

    • SHA256

      90db97318413a416308635b8e91fe814a48eb8d6bf55f5c2ad0170ec9d1a7608

    • SHA512

      734377f9e1f8810d4bf1705918b750a2ceac7ffa344c0576955a5b263453e02897003318159136638d52218cd8d242149d9be6d828b68e2192a53820a30ab9ea

    • SSDEEP

      3072:/tSuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2TGkFY:lnS62Fl+pkeJl3CvRStrFl+EYi

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks