Overview

overview

10

Static

static

3

JaffaCakes...ba.dll

windows7-x64

10

JaffaCakes...ba.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8cfe75206e53ad22c6430ad578a2403b3a4edb34dbb659f0e0485987e462aaba

  • Size

    164KB

  • Sample

    241225-dycl4awpgp

  • MD5

    7f2825e6d06fb645619d752ff3a6c393

  • SHA1

    1234b9759bed2a6fb203a2ac9b5893fda0af3a2d

  • SHA256

    8cfe75206e53ad22c6430ad578a2403b3a4edb34dbb659f0e0485987e462aaba

  • SHA512

    796843dc312c4b96f7aefc34335b3d961560f9b330fd2eee4fc77586e91a13eab6daed7c155e42874957707d72f36cab8168516e33c370611b6c0521a93c176e

  • SSDEEP

    3072:hBefihU8fQ2Sob/xg+eNV1A1I3aiI8i3GdVAzuECtNjP3/3ioP7y11a0E:hBefiv/12+2A1AIpFzxCtNjHSoPm11J

Score
10/10
dridex22202botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.123.40.54:443

82.209.17.209:8172

180.250.21.2:13721
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_8cfe75206e53ad22c6430ad578a2403b3a4edb34dbb659f0e0485987e462aaba

    • Size

      164KB

    • MD5

      7f2825e6d06fb645619d752ff3a6c393

    • SHA1

      1234b9759bed2a6fb203a2ac9b5893fda0af3a2d

    • SHA256

      8cfe75206e53ad22c6430ad578a2403b3a4edb34dbb659f0e0485987e462aaba

    • SHA512

      796843dc312c4b96f7aefc34335b3d961560f9b330fd2eee4fc77586e91a13eab6daed7c155e42874957707d72f36cab8168516e33c370611b6c0521a93c176e

    • SSDEEP

      3072:hBefihU8fQ2Sob/xg+eNV1A1I3aiI8i3GdVAzuECtNjP3/3ioP7y11a0E:hBefiv/12+2A1AIpFzxCtNjHSoPm11J

    Score
    10/10
    dridex22202botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks