General

  • Target

    JaffaCakes118_23983b19f0ecd40c9c10b40679eaef326342bd6bcc99349edee0e7d4b2a32fb2

  • Size

    161KB

  • Sample

    241230-3nkbmaxkay

  • MD5

    deadba74d3818beb403297541efaccdb

  • SHA1

    da2eb3b50195bf50e6268be89e66afe3035e62c2

  • SHA256

    23983b19f0ecd40c9c10b40679eaef326342bd6bcc99349edee0e7d4b2a32fb2

  • SHA512

    d17856c2c81318d74b43c3bf17fabc431af3992cc2cda46422a983f89914f59468722df1800d04fb66d41d8db00e49c697ed207d0497f0ab7048dd434e211bd0

  • SSDEEP

    3072:21Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:4nS62Fl+pkeJl3CvRStrFl+EYh

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_23983b19f0ecd40c9c10b40679eaef326342bd6bcc99349edee0e7d4b2a32fb2

    • Size

      161KB

    • MD5

      deadba74d3818beb403297541efaccdb

    • SHA1

      da2eb3b50195bf50e6268be89e66afe3035e62c2

    • SHA256

      23983b19f0ecd40c9c10b40679eaef326342bd6bcc99349edee0e7d4b2a32fb2

    • SHA512

      d17856c2c81318d74b43c3bf17fabc431af3992cc2cda46422a983f89914f59468722df1800d04fb66d41d8db00e49c697ed207d0497f0ab7048dd434e211bd0

    • SSDEEP

      3072:21Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2wGkFY:4nS62Fl+pkeJl3CvRStrFl+EYh

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks