Overview

overview

10

Static

static

3

e2eb44fcd1...18.dll

windows7-x64

10

e2eb44fcd1...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2eb44fcd16a55430a994df59f6f67e2_JaffaCakes118

  • Size

    188KB

  • Sample

    240406-tlvj5seg55

  • MD5

    e2eb44fcd16a55430a994df59f6f67e2

  • SHA1

    097cf7119e0650f193df56fcec0362c4cf0b0a79

  • SHA256

    23ed2201c220ac9b139397ec9ac55fe14aa5fbf78f7af06e51c4b5d84be0eeec

  • SHA512

    41118852bd9a4f492761101e6ea83b9ca83b080b380952027c46c7ab50a6cf4c7a7a2499ed9a36eeeb87c483a3d41ad841b98b112a63e66d8634d93973f6cd41

  • SSDEEP

    3072:sA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:szIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e2eb44fcd16a55430a994df59f6f67e2_JaffaCakes118

    • Size

      188KB

    • MD5

      e2eb44fcd16a55430a994df59f6f67e2

    • SHA1

      097cf7119e0650f193df56fcec0362c4cf0b0a79

    • SHA256

      23ed2201c220ac9b139397ec9ac55fe14aa5fbf78f7af06e51c4b5d84be0eeec

    • SHA512

      41118852bd9a4f492761101e6ea83b9ca83b080b380952027c46c7ab50a6cf4c7a7a2499ed9a36eeeb87c483a3d41ad841b98b112a63e66d8634d93973f6cd41

    • SSDEEP

      3072:sA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:szIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks