Overview

overview

10

Static

static

3

JaffaCakes...5e.dll

windows7-x64

10

JaffaCakes...5e.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1081247f164bd1f05d459b10e21ec9484efb3b6d414ae6d1b918accfa2cdb65e

  • Size

    188KB

  • Sample

    241230-gtywbazqfp

  • MD5

    ff939e7a7e6c8499928391132a5f7672

  • SHA1

    edbf20ea032956c8d4c52afe003fbd1ecab915a4

  • SHA256

    1081247f164bd1f05d459b10e21ec9484efb3b6d414ae6d1b918accfa2cdb65e

  • SHA512

    01e1b346fb671f0faaa6675d0880077b3e4ad5468e8c72540bd2daacaf0bfec6e45aa55789ab0b6280da80f11ccc933981dd5b00944ac336402d6854f93ca6ab

  • SSDEEP

    3072:vA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAomo:vzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_1081247f164bd1f05d459b10e21ec9484efb3b6d414ae6d1b918accfa2cdb65e

    • Size

      188KB

    • MD5

      ff939e7a7e6c8499928391132a5f7672

    • SHA1

      edbf20ea032956c8d4c52afe003fbd1ecab915a4

    • SHA256

      1081247f164bd1f05d459b10e21ec9484efb3b6d414ae6d1b918accfa2cdb65e

    • SHA512

      01e1b346fb671f0faaa6675d0880077b3e4ad5468e8c72540bd2daacaf0bfec6e45aa55789ab0b6280da80f11ccc933981dd5b00944ac336402d6854f93ca6ab

    • SSDEEP

      3072:vA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAomo:vzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks