Overview

overview

10

Static

static

3

JaffaCakes...f4.dll

windows7-x64

10

JaffaCakes...f4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_334cff404f0f92e0132767b641e0b0fd788858e208101dd02f4109b9f88b6cf4

  • Size

    188KB

  • Sample

    241230-f3r9fszjan

  • MD5

    d2b4ad9a6d0e5874b81c62e1f38273d7

  • SHA1

    a5adb5e1e53ad103f0b90093246ce6b2a2d264e8

  • SHA256

    334cff404f0f92e0132767b641e0b0fd788858e208101dd02f4109b9f88b6cf4

  • SHA512

    8af492585c1f5b9eb17af436afbaaaefc6db232810ad6bd5332e7d66f7208fca2e607238d1037281cbfb70f6945d9312a4267511eda154f9fbc2c9d86a47c20b

  • SSDEEP

    3072:XA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoKo:XzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_334cff404f0f92e0132767b641e0b0fd788858e208101dd02f4109b9f88b6cf4

    • Size

      188KB

    • MD5

      d2b4ad9a6d0e5874b81c62e1f38273d7

    • SHA1

      a5adb5e1e53ad103f0b90093246ce6b2a2d264e8

    • SHA256

      334cff404f0f92e0132767b641e0b0fd788858e208101dd02f4109b9f88b6cf4

    • SHA512

      8af492585c1f5b9eb17af436afbaaaefc6db232810ad6bd5332e7d66f7208fca2e607238d1037281cbfb70f6945d9312a4267511eda154f9fbc2c9d86a47c20b

    • SSDEEP

      3072:XA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoKo:XzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks