Overview

overview

10

Static

static

3

JaffaCakes...3d.dll

windows7-x64

10

JaffaCakes...3d.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4a68758afee3a4b07abe3a593c2331ecc8cd9b8dcb9a5920015939efe6c37f3d

  • Size

    184KB

  • Sample

    241230-1n9keasrft

  • MD5

    79d1682bf2a5c6eb4770033e27979071

  • SHA1

    6a76696e3f05a2d7b3a9dc01482a809840b910d0

  • SHA256

    4a68758afee3a4b07abe3a593c2331ecc8cd9b8dcb9a5920015939efe6c37f3d

  • SHA512

    b981ee97f29e2edbb1c92d6e7024213ac8cf4b9779fdb0c3e2aea7c66044093ff0b7adaa8abd7be443bc9e37124524ffc6c7907bfa0f042ff19e8525ac9c28fc

  • SSDEEP

    3072:wiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoRlzoxss7:wiLVCIT4WK2z1W+CUHZj4Skq/eaoPoC

Score
10/10
dridex22202botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_4a68758afee3a4b07abe3a593c2331ecc8cd9b8dcb9a5920015939efe6c37f3d

    • Size

      184KB

    • MD5

      79d1682bf2a5c6eb4770033e27979071

    • SHA1

      6a76696e3f05a2d7b3a9dc01482a809840b910d0

    • SHA256

      4a68758afee3a4b07abe3a593c2331ecc8cd9b8dcb9a5920015939efe6c37f3d

    • SHA512

      b981ee97f29e2edbb1c92d6e7024213ac8cf4b9779fdb0c3e2aea7c66044093ff0b7adaa8abd7be443bc9e37124524ffc6c7907bfa0f042ff19e8525ac9c28fc

    • SSDEEP

      3072:wiLVj+luuUXoPOK2z1WPRgg5YbW+d0Ojk1bSA5q/eaoRlzoxss7:wiLVCIT4WK2z1W+CUHZj4Skq/eaoPoC

    Score
    10/10
    dridex22202botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks