Overview

overview

10

Static

static

10

0df9a145e0...18.dll

windows7-x64

1

0df9a145e0...18.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0df9a145e0f6468dc66c922f1a626666_JaffaCakes118

  • Size

    132KB

  • MD5

    0df9a145e0f6468dc66c922f1a626666

  • SHA1

    87a0e8664296e154b64e918edd6af10f8a5cd64d

  • SHA256

    c673fa43b6abff8a69b868f634a113e86eacdc7209d2193f8ec340e32108e34f

  • SHA512

    af13ff8cfe44c570522cd2313f6ecab90d1862dc4d5199acd5146a9a9e0b49b95a3e0dbfb388fba6cade5db30ae9cfae4209e0392823a2eec7bf3b1f8ba2c8f5

  • SSDEEP

    3072:/QaU1oKUNYxDipNZlZ477uUfa6oRurlMrcopa:/1U1oxNYxDifvqWKV0uqp

Score
10/10
botnetloader22202dridex

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

116.203.55.59:443

213.190.4.223:9217

51.178.61.60:6602
rc4.plain
rc4.plain

Signatures

  • Dridex Loader 1 IoCs

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader
  • Dridex family
    dridex
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0df9a145e0f6468dc66c922f1a626666_JaffaCakes118
    .dll windows:6 windows x86 arch:x86

    68b66fd5fe2322f1f5fcb9cf4ede12bd


    Headers

    Imports

    Exports

    Sections