Overview

overview

10

Static

static

3

JaffaCakes...6d.dll

windows7-x64

10

JaffaCakes...6d.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_92350d88371752bd578237b75e3167f9fa6c0b12783db0c166592184cac3d86d

  • Size

    188KB

  • Sample

    241224-msqq7svrcm

  • MD5

    b6f396ea6f936bec4f095bbbe9ab7f32

  • SHA1

    a58ddbb7526784f5a02eb1c54bff72d9742a3bb7

  • SHA256

    92350d88371752bd578237b75e3167f9fa6c0b12783db0c166592184cac3d86d

  • SHA512

    faf2880aa99828d3f69857efa5874b606a116abac5708ccc9e033f17a582496daebf146f63a5a4b81516fce0a5393f5d19d19f246c52437910c1046a1220f529

  • SSDEEP

    3072:wA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo3o:wzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_92350d88371752bd578237b75e3167f9fa6c0b12783db0c166592184cac3d86d

    • Size

      188KB

    • MD5

      b6f396ea6f936bec4f095bbbe9ab7f32

    • SHA1

      a58ddbb7526784f5a02eb1c54bff72d9742a3bb7

    • SHA256

      92350d88371752bd578237b75e3167f9fa6c0b12783db0c166592184cac3d86d

    • SHA512

      faf2880aa99828d3f69857efa5874b606a116abac5708ccc9e033f17a582496daebf146f63a5a4b81516fce0a5393f5d19d19f246c52437910c1046a1220f529

    • SSDEEP

      3072:wA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo3o:wzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks