Overview

overview

10

Static

static

3

JaffaCakes...9f.dll

windows7-x64

10

JaffaCakes...9f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_87fe63dd17a6fcf1f6cbb3d57020f41acc181d712b74d9cc0a509a69f150389f

  • Size

    188KB

  • Sample

    241224-cqpe9ayrgj

  • MD5

    3d76e08d1b51c7305d490e27b0da18e5

  • SHA1

    a33ee63481dad5aee2321b298ddcc61e386d9141

  • SHA256

    87fe63dd17a6fcf1f6cbb3d57020f41acc181d712b74d9cc0a509a69f150389f

  • SHA512

    6ea171db4e743e74926ad123f8ae25b92fe8509f90f3379f2196ffe6555679b55769c63fbf6553e61c8fc1f2b1e5c89f51f8b07d9b1fe15ad2cb44cb38a4aa24

  • SSDEEP

    3072:HA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoto:HzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_87fe63dd17a6fcf1f6cbb3d57020f41acc181d712b74d9cc0a509a69f150389f

    • Size

      188KB

    • MD5

      3d76e08d1b51c7305d490e27b0da18e5

    • SHA1

      a33ee63481dad5aee2321b298ddcc61e386d9141

    • SHA256

      87fe63dd17a6fcf1f6cbb3d57020f41acc181d712b74d9cc0a509a69f150389f

    • SHA512

      6ea171db4e743e74926ad123f8ae25b92fe8509f90f3379f2196ffe6555679b55769c63fbf6553e61c8fc1f2b1e5c89f51f8b07d9b1fe15ad2cb44cb38a4aa24

    • SSDEEP

      3072:HA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoto:HzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks