Overview

overview

10

Static

static

3

JaffaCakes...fd.dll

windows7-x64

10

JaffaCakes...fd.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_dbecf882b2f460fbf1e5e055c2b8e1c6933850c5cb65ba8887f1756fa8f8a1fd

  • Size

    188KB

  • Sample

    241223-274zpsvlfp

  • MD5

    9cb9e06611627449f0ffafc6e8bc2f8e

  • SHA1

    aad97bbe7b96d71ec9877c24ff332ceb13c7b9bd

  • SHA256

    dbecf882b2f460fbf1e5e055c2b8e1c6933850c5cb65ba8887f1756fa8f8a1fd

  • SHA512

    183b98e1e77da683c6c809c8d419bb00fe793264d24184ee6f7d8923e6f34d1475e93abb7d86427e90f2c68bdc26f4b819c9e2c6b2497314ebacb4bcea5096cb

  • SSDEEP

    3072:VA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoVo:VzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_dbecf882b2f460fbf1e5e055c2b8e1c6933850c5cb65ba8887f1756fa8f8a1fd

    • Size

      188KB

    • MD5

      9cb9e06611627449f0ffafc6e8bc2f8e

    • SHA1

      aad97bbe7b96d71ec9877c24ff332ceb13c7b9bd

    • SHA256

      dbecf882b2f460fbf1e5e055c2b8e1c6933850c5cb65ba8887f1756fa8f8a1fd

    • SHA512

      183b98e1e77da683c6c809c8d419bb00fe793264d24184ee6f7d8923e6f34d1475e93abb7d86427e90f2c68bdc26f4b819c9e2c6b2497314ebacb4bcea5096cb

    • SSDEEP

      3072:VA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoVo:VzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks