General

  • Target

    JaffaCakes118_88d14edce6ce3e8b946da150d912cb5c49afe8916396893536145a5cf66b6047

  • Size

    159KB

  • Sample

    241230-vnahessqgx

  • MD5

    32f4e88ba7cc43beefc94ccb3194d823

  • SHA1

    62044d0f01b03cfeda0bf09d493c288b58c20666

  • SHA256

    88d14edce6ce3e8b946da150d912cb5c49afe8916396893536145a5cf66b6047

  • SHA512

    27eb427ce663381a4c18247273934be3079764d752c2f1a08866c46e3d6572d1e1ef3f5032df65de6bf7d90410dfd9f25ab99f37949f561065c399e161b4920d

  • SSDEEP

    3072:o58CMtKJlXoDRl4epTGmoAc7iTRilfn6wlYYbZwd:RnClXSRCADTR0VlJZw

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

Targets

    • Target

      JaffaCakes118_88d14edce6ce3e8b946da150d912cb5c49afe8916396893536145a5cf66b6047

    • Size

      159KB

    • MD5

      32f4e88ba7cc43beefc94ccb3194d823

    • SHA1

      62044d0f01b03cfeda0bf09d493c288b58c20666

    • SHA256

      88d14edce6ce3e8b946da150d912cb5c49afe8916396893536145a5cf66b6047

    • SHA512

      27eb427ce663381a4c18247273934be3079764d752c2f1a08866c46e3d6572d1e1ef3f5032df65de6bf7d90410dfd9f25ab99f37949f561065c399e161b4920d

    • SSDEEP

      3072:o58CMtKJlXoDRl4epTGmoAc7iTRilfn6wlYYbZwd:RnClXSRCADTR0VlJZw

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks