Overview

overview

10

Static

static

3

e3257376c6...18.dll

windows7-x64

10

e3257376c6...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3257376c683599068fa53563a94b1de_JaffaCakes118

  • Size

    184KB

  • Sample

    240406-yjne9saa92

  • MD5

    e3257376c683599068fa53563a94b1de

  • SHA1

    431ccd02201fe34f037bd2349c25ee07ba18be09

  • SHA256

    553208b10cb8c5d75be4a78d440b8b4e6b3cd9d055649bfebbcdb2ff79a82824

  • SHA512

    c20a3a7d0bcc27f4cf9821236e710c2fc44b68051f9ebf2711bbbf1b8b66467a73c1f24f6692109392cd0f069d5b36d546cb25c8af3a870b36574e26f90811c0

  • SSDEEP

    3072:Ihd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JsVQcY:I3fOeIv54W6SFKfc9me9v9/JsV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      e3257376c683599068fa53563a94b1de_JaffaCakes118

    • Size

      184KB

    • MD5

      e3257376c683599068fa53563a94b1de

    • SHA1

      431ccd02201fe34f037bd2349c25ee07ba18be09

    • SHA256

      553208b10cb8c5d75be4a78d440b8b4e6b3cd9d055649bfebbcdb2ff79a82824

    • SHA512

      c20a3a7d0bcc27f4cf9821236e710c2fc44b68051f9ebf2711bbbf1b8b66467a73c1f24f6692109392cd0f069d5b36d546cb25c8af3a870b36574e26f90811c0

    • SSDEEP

      3072:Ihd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JsVQcY:I3fOeIv54W6SFKfc9me9v9/JsV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks