Overview

overview

10

Static

static

3

JaffaCakes...35.dll

windows7-x64

10

JaffaCakes...35.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0522d04e7285bb7114f249b83033892bdd03b80b1fa6281c3b4cb99bb2873c35

  • Size

    184KB

  • Sample

    241225-zf52ksxkhj

  • MD5

    5ce4759451cf4a08308609f5a23a8459

  • SHA1

    f788b171cd4ccdc50fcdd2ceec31d3faf9a87eec

  • SHA256

    0522d04e7285bb7114f249b83033892bdd03b80b1fa6281c3b4cb99bb2873c35

  • SHA512

    356437f789d31a5da4ed715773ee1cb30ac0dc39d012c52fde84db4877d07f47e8f32160e3c6601ef37340ee90525c1b0d2eb84a4ec78c05592168406252e672

  • SSDEEP

    3072:TuwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4KNlmsb:h7TXYsd9SkONU1jKGlSlm

Score
10/10
dridex22202botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0522d04e7285bb7114f249b83033892bdd03b80b1fa6281c3b4cb99bb2873c35

    • Size

      184KB

    • MD5

      5ce4759451cf4a08308609f5a23a8459

    • SHA1

      f788b171cd4ccdc50fcdd2ceec31d3faf9a87eec

    • SHA256

      0522d04e7285bb7114f249b83033892bdd03b80b1fa6281c3b4cb99bb2873c35

    • SHA512

      356437f789d31a5da4ed715773ee1cb30ac0dc39d012c52fde84db4877d07f47e8f32160e3c6601ef37340ee90525c1b0d2eb84a4ec78c05592168406252e672

    • SSDEEP

      3072:TuwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4KNlmsb:h7TXYsd9SkONU1jKGlSlm

    Score
    10/10
    dridex22202botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks