Overview

overview

10

Static

static

3

JaffaCakes...43.dll

windows7-x64

10

JaffaCakes...43.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_820b8cc706098ff246f626e104de6cba52987593723d449c9f163c60ef2da643

  • Size

    188KB

  • Sample

    241230-y8jtdazndy

  • MD5

    73d9ccddfcab0700be42678a385b7b78

  • SHA1

    de0e9294d370dc00fdb2438adf8520ec8cd788c3

  • SHA256

    820b8cc706098ff246f626e104de6cba52987593723d449c9f163c60ef2da643

  • SHA512

    2452346e8bca6c68f9e2e9b6dbe0eafdf9562b14a84fc0ac1970909b3d2dfbf7e22c620607c6c0417c38a4eac1264b5875a8f5d7d438192c74f50f6c50a6966e

  • SSDEEP

    3072:+teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz99qM:2q7fYIHBZkTB6DWruUCOwjt

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_820b8cc706098ff246f626e104de6cba52987593723d449c9f163c60ef2da643

    • Size

      188KB

    • MD5

      73d9ccddfcab0700be42678a385b7b78

    • SHA1

      de0e9294d370dc00fdb2438adf8520ec8cd788c3

    • SHA256

      820b8cc706098ff246f626e104de6cba52987593723d449c9f163c60ef2da643

    • SHA512

      2452346e8bca6c68f9e2e9b6dbe0eafdf9562b14a84fc0ac1970909b3d2dfbf7e22c620607c6c0417c38a4eac1264b5875a8f5d7d438192c74f50f6c50a6966e

    • SSDEEP

      3072:+teMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz99qM:2q7fYIHBZkTB6DWruUCOwjt

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks