Overview

overview

10

Static

static

3

JaffaCakes...ed.dll

windows7-x64

10

JaffaCakes...ed.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a17071f23c79edec3fb894b06957280ecc330a3b64e55beb69a10e0f896760ed

  • Size

    188KB

  • Sample

    241230-12hc3stne1

  • MD5

    adcb1e42b988ca39454e5d33906aaab1

  • SHA1

    e2d84779a39d13e5639cb0cb3899294d123ccd53

  • SHA256

    a17071f23c79edec3fb894b06957280ecc330a3b64e55beb69a10e0f896760ed

  • SHA512

    2b1cb481a3abefe215cf39d50a9936e2482a5f9a148e1d27e366324c7c4c605153aaa7cd1bfa89ce7068255f3bb1fafb8b8d05f2c1bcf92239df06d38b544f7e

  • SSDEEP

    3072:tA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAogo:tzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_a17071f23c79edec3fb894b06957280ecc330a3b64e55beb69a10e0f896760ed

    • Size

      188KB

    • MD5

      adcb1e42b988ca39454e5d33906aaab1

    • SHA1

      e2d84779a39d13e5639cb0cb3899294d123ccd53

    • SHA256

      a17071f23c79edec3fb894b06957280ecc330a3b64e55beb69a10e0f896760ed

    • SHA512

      2b1cb481a3abefe215cf39d50a9936e2482a5f9a148e1d27e366324c7c4c605153aaa7cd1bfa89ce7068255f3bb1fafb8b8d05f2c1bcf92239df06d38b544f7e

    • SSDEEP

      3072:tA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAogo:tzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks