Overview

overview

10

Static

static

3

b5b886e1b6...18.dll

windows7-x64

10

b5b886e1b6...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5b886e1b66deb94c1e66f1dc4cd1454_JaffaCakes118

  • Size

    192KB

  • Sample

    240404-mavbnsch37

  • MD5

    b5b886e1b66deb94c1e66f1dc4cd1454

  • SHA1

    24ade615635b5cb868519c83707382e88012ae89

  • SHA256

    06720c339ec8846266f3b0d780faea64ad2e101ce208cb3bff62854cb4e8d040

  • SHA512

    73ffef1162545d03de754d54ac9d10363ea8dbef723e03bb49b5169dc18994118354b9ed22bb75cc941e4f45ecd3ad83e9e7f6482b71ac6a314c97b967438a04

  • SSDEEP

    3072:cSKFONgLkoQKNyXgyGSUfFYLHO0FApClBBa1og0zEjNM:cgofypoCHhFAqLa1oI

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.233.25.228:443

45.76.176.10:5723

167.71.232.57:9217
rc4.plain
rc4.plain

Targets

    • Target

      b5b886e1b66deb94c1e66f1dc4cd1454_JaffaCakes118

    • Size

      192KB

    • MD5

      b5b886e1b66deb94c1e66f1dc4cd1454

    • SHA1

      24ade615635b5cb868519c83707382e88012ae89

    • SHA256

      06720c339ec8846266f3b0d780faea64ad2e101ce208cb3bff62854cb4e8d040

    • SHA512

      73ffef1162545d03de754d54ac9d10363ea8dbef723e03bb49b5169dc18994118354b9ed22bb75cc941e4f45ecd3ad83e9e7f6482b71ac6a314c97b967438a04

    • SSDEEP

      3072:cSKFONgLkoQKNyXgyGSUfFYLHO0FApClBBa1og0zEjNM:cgofypoCHhFAqLa1oI

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks