General

  • Target

    JaffaCakes118_e4e298fcee33b9bbcbdc43c202bc21ad2d3adc6f60263b163b08667e5a9a02f2

  • Size

    161KB

  • Sample

    241230-waqsxs1pgn

  • MD5

    88cbcbe1671bdbbfc3077ea696426a9b

  • SHA1

    5aca84710d3527e0a9f2dfec371672554ae8cb99

  • SHA256

    e4e298fcee33b9bbcbdc43c202bc21ad2d3adc6f60263b163b08667e5a9a02f2

  • SHA512

    3ea0a27ab5462a6df62fef66fc528f800f87a0299b6aa18bae9faf93b5e044c43de858b2f54477fa147bc803f6ad196c7990616fc5b862a25ce5b8d5d66ec1ba

  • SSDEEP

    3072:ZySuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2DGkFY:gnS62Fl+pkeJl3CvRStrFl+EYS

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

78.46.73.125:443

185.148.168.26:2303

66.113.160.126:8172

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_e4e298fcee33b9bbcbdc43c202bc21ad2d3adc6f60263b163b08667e5a9a02f2

    • Size

      161KB

    • MD5

      88cbcbe1671bdbbfc3077ea696426a9b

    • SHA1

      5aca84710d3527e0a9f2dfec371672554ae8cb99

    • SHA256

      e4e298fcee33b9bbcbdc43c202bc21ad2d3adc6f60263b163b08667e5a9a02f2

    • SHA512

      3ea0a27ab5462a6df62fef66fc528f800f87a0299b6aa18bae9faf93b5e044c43de858b2f54477fa147bc803f6ad196c7990616fc5b862a25ce5b8d5d66ec1ba

    • SSDEEP

      3072:ZySuywe6x1ACSZEuNtV+TkqDXkyzbMeJRL3CNa/U9fStrveyk8TZgEd2DGkFY:gnS62Fl+pkeJl3CvRStrFl+EYS

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks