Overview

overview

10

Static

static

3

JaffaCakes...44.dll

windows7-x64

10

JaffaCakes...44.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1db32d588b7a88440a542f31e19fc33b8766e7f8a7b0ce5c6a3cc6b21e790b44

  • Size

    188KB

  • Sample

    241230-3e4nxatmgm

  • MD5

    432119438cde4cc94db7160ce85a53bb

  • SHA1

    59de1b74e545e6afd1a08f7547f1200eb136a8a5

  • SHA256

    1db32d588b7a88440a542f31e19fc33b8766e7f8a7b0ce5c6a3cc6b21e790b44

  • SHA512

    56d1ee05107cb5d9b7cbf71a03118f8685704357b2fb6c1cbdce547467d9709056e6d4178111015ba3fb8cb592d6639fbae532f7989dfeeda43ba450f769dca0

  • SSDEEP

    3072:gA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo0o:gzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1db32d588b7a88440a542f31e19fc33b8766e7f8a7b0ce5c6a3cc6b21e790b44

    • Size

      188KB

    • MD5

      432119438cde4cc94db7160ce85a53bb

    • SHA1

      59de1b74e545e6afd1a08f7547f1200eb136a8a5

    • SHA256

      1db32d588b7a88440a542f31e19fc33b8766e7f8a7b0ce5c6a3cc6b21e790b44

    • SHA512

      56d1ee05107cb5d9b7cbf71a03118f8685704357b2fb6c1cbdce547467d9709056e6d4178111015ba3fb8cb592d6639fbae532f7989dfeeda43ba450f769dca0

    • SSDEEP

      3072:gA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo0o:gzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks