General

  • Target

    JaffaCakes118_ffb45bc2f8595e1f8d6df8f771eb43ea384a66ef967c69acb743fb24c3fddda3

  • Size

    184KB

  • Sample

    241225-1txssszkdk

  • MD5

    65621be07357cd3d2b4ea556ed739104

  • SHA1

    4a764fbb0917c84e19fe8a0b85f723ff44464f1d

  • SHA256

    ffb45bc2f8595e1f8d6df8f771eb43ea384a66ef967c69acb743fb24c3fddda3

  • SHA512

    d8439a2597a25f6aa975077fe913d7ec01d4618604d84f5f99f93b66827ce3796bee3cdc0de45b23332fb8c12cbccec8f9141f7b609db60ef03d0c1001f7b8c5

  • SSDEEP

    3072:AiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:AiLVCIT4WK2z1W+CUHZj4Skq/eaovoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ffb45bc2f8595e1f8d6df8f771eb43ea384a66ef967c69acb743fb24c3fddda3

    • Size

      184KB

    • MD5

      65621be07357cd3d2b4ea556ed739104

    • SHA1

      4a764fbb0917c84e19fe8a0b85f723ff44464f1d

    • SHA256

      ffb45bc2f8595e1f8d6df8f771eb43ea384a66ef967c69acb743fb24c3fddda3

    • SHA512

      d8439a2597a25f6aa975077fe913d7ec01d4618604d84f5f99f93b66827ce3796bee3cdc0de45b23332fb8c12cbccec8f9141f7b609db60ef03d0c1001f7b8c5

    • SSDEEP

      3072:AiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoxlzoxss7:AiLVCIT4WK2z1W+CUHZj4Skq/eaovoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks