Overview

overview

10

Static

static

3

8648fe8a72...18.dll

windows7-x64

10

8648fe8a72...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8648fe8a722044918faa543988eea1b0_JaffaCakes118

  • Size

    180KB

  • Sample

    240402-ja3fhaah8v

  • MD5

    8648fe8a722044918faa543988eea1b0

  • SHA1

    e99252450542b0c73d11fbbeb2069879ab8268f5

  • SHA256

    ed5992735e4d63c6aef98f031156bc74bc10041e1dc19b3b404d9694b74f1e31

  • SHA512

    e8e699a7836707d479cc9cabe2689ef854c0cc913fda0d19878a8fe8e78cc86bc647caf0e9b159662cfdc33940a2f6547227f49089f8e301c0abb7862d95b870

  • SSDEEP

    3072:hD2xFMJeSjU91NwhzvGQ5Fv6GKWiEAZxRzvUAtfRZF5EKWiQqmyFDuA:hD7JeSjoCB5xhCFzsAtZj5NBQoF

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

139.162.232.153:443

5.83.45.48:5412

209.239.112.82:8333
rc4.plain
rc4.plain

Targets

    • Target

      8648fe8a722044918faa543988eea1b0_JaffaCakes118

    • Size

      180KB

    • MD5

      8648fe8a722044918faa543988eea1b0

    • SHA1

      e99252450542b0c73d11fbbeb2069879ab8268f5

    • SHA256

      ed5992735e4d63c6aef98f031156bc74bc10041e1dc19b3b404d9694b74f1e31

    • SHA512

      e8e699a7836707d479cc9cabe2689ef854c0cc913fda0d19878a8fe8e78cc86bc647caf0e9b159662cfdc33940a2f6547227f49089f8e301c0abb7862d95b870

    • SSDEEP

      3072:hD2xFMJeSjU91NwhzvGQ5Fv6GKWiEAZxRzvUAtfRZF5EKWiQqmyFDuA:hD7JeSjoCB5xhCFzsAtZj5NBQoF

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks