Overview

overview

10

Static

static

3

e2fba2437a...18.dll

windows7-x64

10

e2fba2437a...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2fba2437a486d48ee843b55a1a0363d_JaffaCakes118

  • Size

    188KB

  • Sample

    240406-wz7sqsfc7t

  • MD5

    e2fba2437a486d48ee843b55a1a0363d

  • SHA1

    65d1d3b03672e26950bd230364b27061a7c9d9b5

  • SHA256

    8b69e1003469494f9cc54b9dd850a1165206d8b01d58f5bb616b661832509513

  • SHA512

    3fb6bcbda47cb5b535425f09ca00556db81f3968fa5ff0d775ec530c24e4f8a0f45780f5374a1d04a22e81b744a909642411eefdd921e8503161ac174a36a791

  • SSDEEP

    3072:LA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoro:LzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e2fba2437a486d48ee843b55a1a0363d_JaffaCakes118

    • Size

      188KB

    • MD5

      e2fba2437a486d48ee843b55a1a0363d

    • SHA1

      65d1d3b03672e26950bd230364b27061a7c9d9b5

    • SHA256

      8b69e1003469494f9cc54b9dd850a1165206d8b01d58f5bb616b661832509513

    • SHA512

      3fb6bcbda47cb5b535425f09ca00556db81f3968fa5ff0d775ec530c24e4f8a0f45780f5374a1d04a22e81b744a909642411eefdd921e8503161ac174a36a791

    • SSDEEP

      3072:LA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoro:LzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks