Overview

overview

10

Static

static

3

JaffaCakes...6c.dll

windows7-x64

10

JaffaCakes...6c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_517cdbc378b8f434e992a59f2c28a8afb34dc4fab3e0d6b96e457c10ff5c4f6c

  • Size

    188KB

  • Sample

    241223-zkpkds1kfk

  • MD5

    a612796c1e8910b1f4fcb746fc740472

  • SHA1

    978189dd3719128a9ee0707195025c5612df2ce3

  • SHA256

    517cdbc378b8f434e992a59f2c28a8afb34dc4fab3e0d6b96e457c10ff5c4f6c

  • SHA512

    c97e811823c07cbc9c7335760a55bbffecb033ccd810d3a9d65f30f93ed435a03f6c61ead34c46419ea930458d0ce33f45425726974419bd191211bb1a81ca3e

  • SSDEEP

    3072:TA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:TzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_517cdbc378b8f434e992a59f2c28a8afb34dc4fab3e0d6b96e457c10ff5c4f6c

    • Size

      188KB

    • MD5

      a612796c1e8910b1f4fcb746fc740472

    • SHA1

      978189dd3719128a9ee0707195025c5612df2ce3

    • SHA256

      517cdbc378b8f434e992a59f2c28a8afb34dc4fab3e0d6b96e457c10ff5c4f6c

    • SHA512

      c97e811823c07cbc9c7335760a55bbffecb033ccd810d3a9d65f30f93ed435a03f6c61ead34c46419ea930458d0ce33f45425726974419bd191211bb1a81ca3e

    • SSDEEP

      3072:TA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:TzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks