Overview

overview

10

Static

static

3

JaffaCakes...40.dll

windows7-x64

10

JaffaCakes...40.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7a768b5f1efe32cca1eb8013011163f48ff618bead56803bb90beb894f37c440

  • Size

    188KB

  • Sample

    241223-yzr4dsznam

  • MD5

    2aaebb074914bc966e01494324441793

  • SHA1

    f79fdb6bcdbdc470c042e677b467885e2fdd1492

  • SHA256

    7a768b5f1efe32cca1eb8013011163f48ff618bead56803bb90beb894f37c440

  • SHA512

    6429a57e5eb90908c330d4e52cb6cd1d7dd88cd1e158135a9f19b7034445e982206afb0a5c432f4e97c83166a222d7d31920222f3fee34ca8b2a8ef910d81858

  • SSDEEP

    3072:1teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:Rq7fYIHBZkTB6DWruUCOwjt

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_7a768b5f1efe32cca1eb8013011163f48ff618bead56803bb90beb894f37c440

    • Size

      188KB

    • MD5

      2aaebb074914bc966e01494324441793

    • SHA1

      f79fdb6bcdbdc470c042e677b467885e2fdd1492

    • SHA256

      7a768b5f1efe32cca1eb8013011163f48ff618bead56803bb90beb894f37c440

    • SHA512

      6429a57e5eb90908c330d4e52cb6cd1d7dd88cd1e158135a9f19b7034445e982206afb0a5c432f4e97c83166a222d7d31920222f3fee34ca8b2a8ef910d81858

    • SSDEEP

      3072:1teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzq9qM:Rq7fYIHBZkTB6DWruUCOwjt

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks