Overview

overview

10

Static

static

3

JaffaCakes...70.dll

windows7-x64

10

JaffaCakes...70.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_40be9ba39568aa248744d3224b7c7747f227dbd0cf0b81300eddf11b79cd1370

  • Size

    188KB

  • Sample

    241230-xwmttsvjak

  • MD5

    e7d770fad20f04b6ee72e4a47e805b2b

  • SHA1

    b6e84685aaa56991cbc8535a961ab6a3d23ac1bc

  • SHA256

    40be9ba39568aa248744d3224b7c7747f227dbd0cf0b81300eddf11b79cd1370

  • SHA512

    74e3c5db1504d022c0bc80d3255ff748911642310556076d7fe80e82d902b1f6d7a6ebddf01a589e9801269a416659b9e460060eb0ea14ecd8414e3b25260508

  • SSDEEP

    3072:aA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoHo:azIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_40be9ba39568aa248744d3224b7c7747f227dbd0cf0b81300eddf11b79cd1370

    • Size

      188KB

    • MD5

      e7d770fad20f04b6ee72e4a47e805b2b

    • SHA1

      b6e84685aaa56991cbc8535a961ab6a3d23ac1bc

    • SHA256

      40be9ba39568aa248744d3224b7c7747f227dbd0cf0b81300eddf11b79cd1370

    • SHA512

      74e3c5db1504d022c0bc80d3255ff748911642310556076d7fe80e82d902b1f6d7a6ebddf01a589e9801269a416659b9e460060eb0ea14ecd8414e3b25260508

    • SSDEEP

      3072:aA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoHo:azIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks