General

  • Target

    JaffaCakes118_0055fc2229fb31239a28da61320f4687108f4fd3ab96d2b5018a8f2d1f7a1d7d

  • Size

    184KB

  • Sample

    241231-aam65sxqgy

  • MD5

    dfc66b08d47ab956468c01bf6f19937d

  • SHA1

    b8b7d32ebed4c537f771052d580805c31eb9a1db

  • SHA256

    0055fc2229fb31239a28da61320f4687108f4fd3ab96d2b5018a8f2d1f7a1d7d

  • SHA512

    190a1e59d61758337a4e467f06e2806ab7cbd79da2ca42082193d463fead59389d756f9920426a17c2e7b326d8d05ef25fd2ed04be18a1aa8c1c8652858ea5f8

  • SSDEEP

    3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eaoXoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0055fc2229fb31239a28da61320f4687108f4fd3ab96d2b5018a8f2d1f7a1d7d

    • Size

      184KB

    • MD5

      dfc66b08d47ab956468c01bf6f19937d

    • SHA1

      b8b7d32ebed4c537f771052d580805c31eb9a1db

    • SHA256

      0055fc2229fb31239a28da61320f4687108f4fd3ab96d2b5018a8f2d1f7a1d7d

    • SHA512

      190a1e59d61758337a4e467f06e2806ab7cbd79da2ca42082193d463fead59389d756f9920426a17c2e7b326d8d05ef25fd2ed04be18a1aa8c1c8652858ea5f8

    • SSDEEP

      3072:6iLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoJlzoxss7:6iLVCIT4WK2z1W+CUHZj4Skq/eaoXoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks