Overview

overview

10

Static

static

3

JaffaCakes...38.dll

windows7-x64

10

JaffaCakes...38.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_91b1b780b1422576115cb56c2edc92d1bd0ed87b0e6712167229be333a1ef138

  • Size

    188KB

  • Sample

    241223-w3zxasxkhx

  • MD5

    03e5ba487a6adcd78ee845c253116871

  • SHA1

    4493121799fd8ae2f241c1c517d805ebcad979db

  • SHA256

    91b1b780b1422576115cb56c2edc92d1bd0ed87b0e6712167229be333a1ef138

  • SHA512

    2c8bf9f90949df17a32d87cd5d8afdfd9710ae03a45ee8dabc4d4897424087cfecfda1b0f4078ada55bfae0b7aa54fe2f082656b624b896e92a1c53a5c49b6b1

  • SSDEEP

    3072:mA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoto:mzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_91b1b780b1422576115cb56c2edc92d1bd0ed87b0e6712167229be333a1ef138

    • Size

      188KB

    • MD5

      03e5ba487a6adcd78ee845c253116871

    • SHA1

      4493121799fd8ae2f241c1c517d805ebcad979db

    • SHA256

      91b1b780b1422576115cb56c2edc92d1bd0ed87b0e6712167229be333a1ef138

    • SHA512

      2c8bf9f90949df17a32d87cd5d8afdfd9710ae03a45ee8dabc4d4897424087cfecfda1b0f4078ada55bfae0b7aa54fe2f082656b624b896e92a1c53a5c49b6b1

    • SSDEEP

      3072:mA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoto:mzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks