Overview

overview

10

Static

static

3

38b2c14f20...18.dll

windows7-x64

10

38b2c14f20...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38b2c14f20f89f5b007a660bda519fc6_JaffaCakes118

  • Size

    180KB

  • Sample

    240330-k1ww3scg86

  • MD5

    38b2c14f20f89f5b007a660bda519fc6

  • SHA1

    a38c9f4fdfa7a2eedc29cf533947a0ed113726fd

  • SHA256

    4ad7b0ee8a2133fb01c221fc1ee6ba225fde0d36ea4ed3d05de14ee1a42fcae6

  • SHA512

    3e151dd03fb77cb7735f02c7e46c12159c06c48c2d21b57ff2303637049a530fb23ca10a9fd0ada21fb7132b913459dd368e79d0059a65fd73862b126f117a12

  • SSDEEP

    3072:oD23JeSjU91NwhzvGQ5Fv6GKWiEAZxRzvUAtfRZF5EKWiQqmyF4uA:oDwJeSjoCB5xhCFzsAtZj5NBQoF

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

139.162.232.153:443

5.83.45.48:5412

209.239.112.82:8333
rc4.plain
rc4.plain

Targets

    • Target

      38b2c14f20f89f5b007a660bda519fc6_JaffaCakes118

    • Size

      180KB

    • MD5

      38b2c14f20f89f5b007a660bda519fc6

    • SHA1

      a38c9f4fdfa7a2eedc29cf533947a0ed113726fd

    • SHA256

      4ad7b0ee8a2133fb01c221fc1ee6ba225fde0d36ea4ed3d05de14ee1a42fcae6

    • SHA512

      3e151dd03fb77cb7735f02c7e46c12159c06c48c2d21b57ff2303637049a530fb23ca10a9fd0ada21fb7132b913459dd368e79d0059a65fd73862b126f117a12

    • SSDEEP

      3072:oD23JeSjU91NwhzvGQ5Fv6GKWiEAZxRzvUAtfRZF5EKWiQqmyF4uA:oDwJeSjoCB5xhCFzsAtZj5NBQoF

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks