General

  • Target

    JaffaCakes118_1c350ffe622dd761e91132fbe81d2022ec21f70634e0bca2845da2195beebbcd

  • Size

    161KB

  • Sample

    241230-a1my3asjfq

  • MD5

    4f692f72b5ada5aa592b25086e73404f

  • SHA1

    0abc39013dda2920b73b13442cc40354831ec29e

  • SHA256

    1c350ffe622dd761e91132fbe81d2022ec21f70634e0bca2845da2195beebbcd

  • SHA512

    7236970db9449cb9e1d20aa705891f7433832981441dfa9206cfd228540759c6adbe6b095dcf5fb53e547515f793804f26dd108a9aad66b4d973463d7e33785a

  • SSDEEP

    3072:f8Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2FGkFY:0nS62Fl+pkeJl3CvRStrFl+EYI

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1c350ffe622dd761e91132fbe81d2022ec21f70634e0bca2845da2195beebbcd

    • Size

      161KB

    • MD5

      4f692f72b5ada5aa592b25086e73404f

    • SHA1

      0abc39013dda2920b73b13442cc40354831ec29e

    • SHA256

      1c350ffe622dd761e91132fbe81d2022ec21f70634e0bca2845da2195beebbcd

    • SHA512

      7236970db9449cb9e1d20aa705891f7433832981441dfa9206cfd228540759c6adbe6b095dcf5fb53e547515f793804f26dd108a9aad66b4d973463d7e33785a

    • SSDEEP

      3072:f8Suywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2FGkFY:0nS62Fl+pkeJl3CvRStrFl+EYI

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks