Overview

overview

10

Static

static

3

JaffaCakes...da.dll

windows7-x64

10

JaffaCakes...da.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ac9e9a91d4d08343b4ed7cf2d1e153f95ea32b0be3b0b7a60ccf75100a73a5da

  • Size

    188KB

  • Sample

    241224-dnx52s1kal

  • MD5

    c529c298b283fe893c99684ba3220b30

  • SHA1

    17ae90677b49076d9f6567b1046da0409ec430f1

  • SHA256

    ac9e9a91d4d08343b4ed7cf2d1e153f95ea32b0be3b0b7a60ccf75100a73a5da

  • SHA512

    e60662573bea7fe50c53db7d294ffbed8ce8da753ccb39aa5abdaf3b3f80c9504225892cce30e258b342bc425d5b4c6caaf11fd3bc8f049eddbc1642ccca7bed

  • SSDEEP

    3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzB9qM:cq7fYIHBZkTB6DWruUCOwjt

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ac9e9a91d4d08343b4ed7cf2d1e153f95ea32b0be3b0b7a60ccf75100a73a5da

    • Size

      188KB

    • MD5

      c529c298b283fe893c99684ba3220b30

    • SHA1

      17ae90677b49076d9f6567b1046da0409ec430f1

    • SHA256

      ac9e9a91d4d08343b4ed7cf2d1e153f95ea32b0be3b0b7a60ccf75100a73a5da

    • SHA512

      e60662573bea7fe50c53db7d294ffbed8ce8da753ccb39aa5abdaf3b3f80c9504225892cce30e258b342bc425d5b4c6caaf11fd3bc8f049eddbc1642ccca7bed

    • SSDEEP

      3072:YteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzB9qM:cq7fYIHBZkTB6DWruUCOwjt

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks