Overview

overview

10

Static

static

3

JaffaCakes...64.dll

windows7-x64

10

JaffaCakes...64.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_fd8b2bba424446f07cfab095f931ad8c0c67269b14b1fc23e7b4eae20aa38264

  • Size

    188KB

  • Sample

    241230-e2k83sxrgx

  • MD5

    a323739d5edf12d044c9c7645e2e6cde

  • SHA1

    8d3f3274f905eeecd96bdc664565d97130f0a533

  • SHA256

    fd8b2bba424446f07cfab095f931ad8c0c67269b14b1fc23e7b4eae20aa38264

  • SHA512

    903deb91547caaf38e8ff680b7388c770975cfd677f5742bce0aa17443461bb368bd87a40d9e306a30a8bab7c52d9273861793377da544f312ceaf28848973a4

  • SSDEEP

    3072:ZA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoHo:ZzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_fd8b2bba424446f07cfab095f931ad8c0c67269b14b1fc23e7b4eae20aa38264

    • Size

      188KB

    • MD5

      a323739d5edf12d044c9c7645e2e6cde

    • SHA1

      8d3f3274f905eeecd96bdc664565d97130f0a533

    • SHA256

      fd8b2bba424446f07cfab095f931ad8c0c67269b14b1fc23e7b4eae20aa38264

    • SHA512

      903deb91547caaf38e8ff680b7388c770975cfd677f5742bce0aa17443461bb368bd87a40d9e306a30a8bab7c52d9273861793377da544f312ceaf28848973a4

    • SSDEEP

      3072:ZA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoHo:ZzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks