Overview

overview

10

Static

static

3

JaffaCakes...f1.dll

windows7-x64

10

JaffaCakes...f1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c9b5a7e9c045df9446319236787d073b8d39dabef39c68fd79607adebf059ef1

  • Size

    188KB

  • Sample

    241224-af3tsawmgj

  • MD5

    0ac616cc9df990add2239baa4a425995

  • SHA1

    97ec237c36a8e0aca02191c3bc5c7d43d86112b6

  • SHA256

    c9b5a7e9c045df9446319236787d073b8d39dabef39c68fd79607adebf059ef1

  • SHA512

    2a4536f412811f47cabb6fa25b66e2fc79d52156326d371ef9261ae5fd03481576a397c89f9fc01022419ef5012d249e78657c8faeced1d90ebc821a34f9b312

  • SSDEEP

    3072:2A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:2zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_c9b5a7e9c045df9446319236787d073b8d39dabef39c68fd79607adebf059ef1

    • Size

      188KB

    • MD5

      0ac616cc9df990add2239baa4a425995

    • SHA1

      97ec237c36a8e0aca02191c3bc5c7d43d86112b6

    • SHA256

      c9b5a7e9c045df9446319236787d073b8d39dabef39c68fd79607adebf059ef1

    • SHA512

      2a4536f412811f47cabb6fa25b66e2fc79d52156326d371ef9261ae5fd03481576a397c89f9fc01022419ef5012d249e78657c8faeced1d90ebc821a34f9b312

    • SSDEEP

      3072:2A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:2zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks