Overview

overview

10

Static

static

3

JaffaCakes...fb.dll

windows7-x64

10

JaffaCakes...fb.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ef98b14d27e05bc4d4ac654a913284e3c173276dbbaa833211e771bb730db6fb

  • Size

    188KB

  • Sample

    241224-nhxbnswpek

  • MD5

    dfa18bcbc796972cacbc13c8ba5d247d

  • SHA1

    9f0ff12a0b5fd651fb6193a65c8724cbb124b2b7

  • SHA256

    ef98b14d27e05bc4d4ac654a913284e3c173276dbbaa833211e771bb730db6fb

  • SHA512

    da1d8c225d84180d2fa135150499de65c2a164c29e36d5bcd174cb81442dc05b6cf22cdb726383f5a51a913b713460e322a733159829f8f962e77384147d31f0

  • SSDEEP

    3072:FA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoDo:FzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_ef98b14d27e05bc4d4ac654a913284e3c173276dbbaa833211e771bb730db6fb

    • Size

      188KB

    • MD5

      dfa18bcbc796972cacbc13c8ba5d247d

    • SHA1

      9f0ff12a0b5fd651fb6193a65c8724cbb124b2b7

    • SHA256

      ef98b14d27e05bc4d4ac654a913284e3c173276dbbaa833211e771bb730db6fb

    • SHA512

      da1d8c225d84180d2fa135150499de65c2a164c29e36d5bcd174cb81442dc05b6cf22cdb726383f5a51a913b713460e322a733159829f8f962e77384147d31f0

    • SSDEEP

      3072:FA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoDo:FzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks