Overview

overview

10

Static

static

3

JaffaCakes...3c.dll

windows7-x64

10

JaffaCakes...3c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_22e65901f199785141f5bffa31153d1e0bb67339d75c8d4218fd9d514e05333c

  • Size

    188KB

  • Sample

    241230-2dhjlsvkat

  • MD5

    935377fbef77cda3eca5e027b4939391

  • SHA1

    9f11015ac184d0edaf9006f734d4e42f62e43a80

  • SHA256

    22e65901f199785141f5bffa31153d1e0bb67339d75c8d4218fd9d514e05333c

  • SHA512

    931746a4ce6cfdd4fbd175eb1269d9dbb9dcd0d54a356fa66c10aa4e91ea99a08b2c5e5d0b9b11958ce2a9e5d6d316a7cbe95e6456d93fee5154b9a3a340ba40

  • SSDEEP

    3072:IteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzr9qM:sq7fYIHBZkTB6DWruUCOwjt

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_22e65901f199785141f5bffa31153d1e0bb67339d75c8d4218fd9d514e05333c

    • Size

      188KB

    • MD5

      935377fbef77cda3eca5e027b4939391

    • SHA1

      9f11015ac184d0edaf9006f734d4e42f62e43a80

    • SHA256

      22e65901f199785141f5bffa31153d1e0bb67339d75c8d4218fd9d514e05333c

    • SHA512

      931746a4ce6cfdd4fbd175eb1269d9dbb9dcd0d54a356fa66c10aa4e91ea99a08b2c5e5d0b9b11958ce2a9e5d6d316a7cbe95e6456d93fee5154b9a3a340ba40

    • SSDEEP

      3072:IteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzr9qM:sq7fYIHBZkTB6DWruUCOwjt

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks