General

  • Target

    JaffaCakes118_fcc64b01a3aaae5e41b5ec77c4461330fcf7f2ad62c8097fb870cc2ab346c7dd

  • Size

    177KB

  • Sample

    241223-ylrwgayrhw

  • MD5

    71dad2c2c5865d67764723408cb8ec00

  • SHA1

    94481fb7297126350691d8c65d507ef328a3e82b

  • SHA256

    fcc64b01a3aaae5e41b5ec77c4461330fcf7f2ad62c8097fb870cc2ab346c7dd

  • SHA512

    39caa09417555f2c0d30925e20dc892032b43da20b096ae34af8f5e6f0e4cc49ae9839387ad1179ca8dba104879b8920003f4b9bad2c0ce920e6234e41b47ab5

  • SSDEEP

    3072:woNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SSrKI6bl/g:jaIzLgKrjbvUAjERycp6c8qgATA2TQU3

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fcc64b01a3aaae5e41b5ec77c4461330fcf7f2ad62c8097fb870cc2ab346c7dd

    • Size

      177KB

    • MD5

      71dad2c2c5865d67764723408cb8ec00

    • SHA1

      94481fb7297126350691d8c65d507ef328a3e82b

    • SHA256

      fcc64b01a3aaae5e41b5ec77c4461330fcf7f2ad62c8097fb870cc2ab346c7dd

    • SHA512

      39caa09417555f2c0d30925e20dc892032b43da20b096ae34af8f5e6f0e4cc49ae9839387ad1179ca8dba104879b8920003f4b9bad2c0ce920e6234e41b47ab5

    • SSDEEP

      3072:woNQK/z2dvUgKrjbeSUAjnERwDkCWptcvcb8qgAE0A2C8FQUVac8SSrKI6bl/g:jaIzLgKrjbvUAjERycp6c8qgATA2TQU3

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks