General

  • Target

    JaffaCakes118_86f1ddf09155a9dfa3c62c7af0315a80030cf0faf9b3eb37aca4fee8c8c7dadd

  • Size

    184KB

  • Sample

    241225-a9rcvaspak

  • MD5

    cecd294b678c243e1e7512bb485483e4

  • SHA1

    c10521b1a393d65df4930fc589870fd0270889dc

  • SHA256

    86f1ddf09155a9dfa3c62c7af0315a80030cf0faf9b3eb37aca4fee8c8c7dadd

  • SHA512

    6904edfca1f706d5959d9f1ea564f8fea0f2bccc4f5009a7b2f59f9bf2cf9a159f74893b95e41b3ddf5a7bb05c0530d55a8427c1438fb81285ca56e75b2fe590

  • SSDEEP

    3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723

rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_86f1ddf09155a9dfa3c62c7af0315a80030cf0faf9b3eb37aca4fee8c8c7dadd

    • Size

      184KB

    • MD5

      cecd294b678c243e1e7512bb485483e4

    • SHA1

      c10521b1a393d65df4930fc589870fd0270889dc

    • SHA256

      86f1ddf09155a9dfa3c62c7af0315a80030cf0faf9b3eb37aca4fee8c8c7dadd

    • SHA512

      6904edfca1f706d5959d9f1ea564f8fea0f2bccc4f5009a7b2f59f9bf2cf9a159f74893b95e41b3ddf5a7bb05c0530d55a8427c1438fb81285ca56e75b2fe590

    • SSDEEP

      3072:liLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoIlzoxss7:liLVCIT4WK2z1W+CUHZj4Skq/eaoWoC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex family

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks