Overview

overview

10

Static

static

3

JaffaCakes...c6.dll

windows7-x64

10

JaffaCakes...c6.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_00752a06db0eacfd3b09e36d3a3d29c6

  • Size

    180KB

  • Sample

    250105-2z3rnszrfl

  • MD5

    00752a06db0eacfd3b09e36d3a3d29c6

  • SHA1

    9afd6ace7a8b25a58450cf7ec16db38a480c32dc

  • SHA256

    e8291c194029eedc2117c099b3089a252dfb940160530409df4b9ea85efc9033

  • SHA512

    1895a988c678e30ceac1afb421dc29fc6531617b0a5497ec50ae90b2cf85bf62724ad830576e9394cecd6f334f864fa6630a763671b30a91dfe0aa052315ebfe

  • SSDEEP

    3072:BGp0m9FOGDv64TOvqdjR91E404PUW6bKHJZK0Bzb5Hea:BGp0bG6q7040aBfK0db5

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

212.237.17.99:443

176.28.17.160:6602

51.254.140.238:8333
rc4.plain
rc4.plain

Targets

    • Target

      JaffaCakes118_00752a06db0eacfd3b09e36d3a3d29c6

    • Size

      180KB

    • MD5

      00752a06db0eacfd3b09e36d3a3d29c6

    • SHA1

      9afd6ace7a8b25a58450cf7ec16db38a480c32dc

    • SHA256

      e8291c194029eedc2117c099b3089a252dfb940160530409df4b9ea85efc9033

    • SHA512

      1895a988c678e30ceac1afb421dc29fc6531617b0a5497ec50ae90b2cf85bf62724ad830576e9394cecd6f334f864fa6630a763671b30a91dfe0aa052315ebfe

    • SSDEEP

      3072:BGp0m9FOGDv64TOvqdjR91E404PUW6bKHJZK0Bzb5Hea:BGp0bG6q7040aBfK0db5

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex family

      dridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks