Overview

overview

10

Static

static

3

JaffaCakes...82.dll

windows7-x64

10

JaffaCakes...82.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_59b48deff733cad2e8d379689bd000437c9aef85cd9d61a935e581471ae25082

  • Size

    188KB

  • Sample

    241224-lvhmyavjhl

  • MD5

    a5dda78c81919b1b52a8e71e3b6cf57f

  • SHA1

    9003247fb57ca61adc621c27cfd1de505bdca9c8

  • SHA256

    59b48deff733cad2e8d379689bd000437c9aef85cd9d61a935e581471ae25082

  • SHA512

    0f85f06b9a0381604c8325bb7124ed268ce708b62747c514c4db1b4ad2d73778947b411281f8cd1c95de7527184a6522a005586161268225609f26e18c7ca3b9

  • SSDEEP

    3072:XA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoqo:XzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_59b48deff733cad2e8d379689bd000437c9aef85cd9d61a935e581471ae25082

    • Size

      188KB

    • MD5

      a5dda78c81919b1b52a8e71e3b6cf57f

    • SHA1

      9003247fb57ca61adc621c27cfd1de505bdca9c8

    • SHA256

      59b48deff733cad2e8d379689bd000437c9aef85cd9d61a935e581471ae25082

    • SHA512

      0f85f06b9a0381604c8325bb7124ed268ce708b62747c514c4db1b4ad2d73778947b411281f8cd1c95de7527184a6522a005586161268225609f26e18c7ca3b9

    • SSDEEP

      3072:XA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoqo:XzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks