Overview

overview

10

Static

static

3

JaffaCakes...99.dll

windows7-x64

10

JaffaCakes...99.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_17e5ea22e1d8a275b565147668dacc2964e274fb9329212df88832c8e042db99

  • Size

    188KB

  • Sample

    241230-y1k2gazke1

  • MD5

    b69d47a604c6bb50cbac4bc8481109d7

  • SHA1

    7ac40e69bade42921eccb0b66abf4c0a4e94ef04

  • SHA256

    17e5ea22e1d8a275b565147668dacc2964e274fb9329212df88832c8e042db99

  • SHA512

    849db656015ac7211e955aaf4f8f6b849189956c6b43d57c32c02ebb9645677d72bb63460989babaeda5e07dd9d11eb22de35d2d7ba31aed1e958215d76daf86

  • SSDEEP

    3072:xA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoEo:xzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_17e5ea22e1d8a275b565147668dacc2964e274fb9329212df88832c8e042db99

    • Size

      188KB

    • MD5

      b69d47a604c6bb50cbac4bc8481109d7

    • SHA1

      7ac40e69bade42921eccb0b66abf4c0a4e94ef04

    • SHA256

      17e5ea22e1d8a275b565147668dacc2964e274fb9329212df88832c8e042db99

    • SHA512

      849db656015ac7211e955aaf4f8f6b849189956c6b43d57c32c02ebb9645677d72bb63460989babaeda5e07dd9d11eb22de35d2d7ba31aed1e958215d76daf86

    • SSDEEP

      3072:xA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoEo:xzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks