Overview

overview

10

Static

static

3

JaffaCakes...30.dll

windows7-x64

10

JaffaCakes...30.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_906e7540dfb646e0da7588a223dd72776c7252bac4002fbdf5214a8265219530

  • Size

    188KB

  • Sample

    241230-ghkjjsznfs

  • MD5

    53db9c6ae943226f4986301b6e8a901e

  • SHA1

    dd4737d49bcacb18c504e951ebd459d051a2cac0

  • SHA256

    906e7540dfb646e0da7588a223dd72776c7252bac4002fbdf5214a8265219530

  • SHA512

    7d296149803c05b335c16b778ef50769fba87c14b6f4f045ce94829f64c4d3a35231242b9211cdb873c6c0386f2cbd43c877391a6993df7473c994fc051aab90

  • SSDEEP

    3072:zteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzf9qM:7q7fYIHBZkTB6DWruUCOwjt

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_906e7540dfb646e0da7588a223dd72776c7252bac4002fbdf5214a8265219530

    • Size

      188KB

    • MD5

      53db9c6ae943226f4986301b6e8a901e

    • SHA1

      dd4737d49bcacb18c504e951ebd459d051a2cac0

    • SHA256

      906e7540dfb646e0da7588a223dd72776c7252bac4002fbdf5214a8265219530

    • SHA512

      7d296149803c05b335c16b778ef50769fba87c14b6f4f045ce94829f64c4d3a35231242b9211cdb873c6c0386f2cbd43c877391a6993df7473c994fc051aab90

    • SSDEEP

      3072:zteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzf9qM:7q7fYIHBZkTB6DWruUCOwjt

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks