Overview

overview

10

Static

static

3

JaffaCakes...6a.dll

windows7-x64

10

JaffaCakes...6a.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0882deeb9ff61da704be07b213e275b5f6ff8ee13ee462f06d18c0ec3c84e76a

  • Size

    184KB

  • Sample

    241229-lg9jhaykd1

  • MD5

    301144f07982555dd69a5e21092234f8

  • SHA1

    189cc529b627eca27432cc2d8a7833cf72a83439

  • SHA256

    0882deeb9ff61da704be07b213e275b5f6ff8ee13ee462f06d18c0ec3c84e76a

  • SHA512

    2da875e1d100c4380a7f2e3916d9cde9c49af36fb7575005a5322279fa1904d7b67f061c40bf15da6246163ee14b7a1bbb2ec491c73ad967ccbaed97f5e94fe9

  • SSDEEP

    3072:7uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4K6lmsb:57TXYsd9SkONU1jKGlxlm

Score
10/10
dridex22202botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_0882deeb9ff61da704be07b213e275b5f6ff8ee13ee462f06d18c0ec3c84e76a

    • Size

      184KB

    • MD5

      301144f07982555dd69a5e21092234f8

    • SHA1

      189cc529b627eca27432cc2d8a7833cf72a83439

    • SHA256

      0882deeb9ff61da704be07b213e275b5f6ff8ee13ee462f06d18c0ec3c84e76a

    • SHA512

      2da875e1d100c4380a7f2e3916d9cde9c49af36fb7575005a5322279fa1904d7b67f061c40bf15da6246163ee14b7a1bbb2ec491c73ad967ccbaed97f5e94fe9

    • SSDEEP

      3072:7uwfhNXphcqs2tJYsoa9Xibolk0CtPBU1jhhF8ZJ8fDo4K6lmsb:57TXYsd9SkONU1jKGlxlm

    Score
    10/10
    dridex22202botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks