Overview

overview

10

Static

static

3

JaffaCakes...d7.dll

windows7-x64

10

JaffaCakes...d7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f7fa19e2009803543d259088a74ff2dd16f3da3bb685da0e1f830866d982bed7

  • Size

    188KB

  • Sample

    241230-g7gtys1ka1

  • MD5

    4b6f627595bd4f7dbc3ccb09085017a1

  • SHA1

    788fb264ecf8e9e615502cd729114ead700b20e7

  • SHA256

    f7fa19e2009803543d259088a74ff2dd16f3da3bb685da0e1f830866d982bed7

  • SHA512

    d84a2ea284b71daa5869d104077644f1daba2a7294edf863a206a5c8e8862a473b2a07ca64e327871112a048a4b1790e8a24af9c466351c0a77ffb45c5e826d3

  • SSDEEP

    3072:aA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAopo:azIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_f7fa19e2009803543d259088a74ff2dd16f3da3bb685da0e1f830866d982bed7

    • Size

      188KB

    • MD5

      4b6f627595bd4f7dbc3ccb09085017a1

    • SHA1

      788fb264ecf8e9e615502cd729114ead700b20e7

    • SHA256

      f7fa19e2009803543d259088a74ff2dd16f3da3bb685da0e1f830866d982bed7

    • SHA512

      d84a2ea284b71daa5869d104077644f1daba2a7294edf863a206a5c8e8862a473b2a07ca64e327871112a048a4b1790e8a24af9c466351c0a77ffb45c5e826d3

    • SSDEEP

      3072:aA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAopo:azIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks