Overview

overview

10

Static

static

3

e60386fb45...18.dll

windows7-x64

10

e60386fb45...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e60386fb4556ccfe878ffb046f1b1d37_JaffaCakes118

  • Size

    188KB

  • Sample

    240407-2jhrkagg62

  • MD5

    e60386fb4556ccfe878ffb046f1b1d37

  • SHA1

    a5c33c953d8e8e33a30dc36713e85469a7a0f3c8

  • SHA256

    a5d6ae83233e293061cbb6eae35b9a7687ffca5acfabddf01e1d833c3deb1197

  • SHA512

    f88eabc32b327ee9c17d94569d89475616dd1010715a1219cf80dddfad650fe74b76aee9dd0693a018a36d5eaa3f436881f611af73b4be13cbd01c34808f02c4

  • SSDEEP

    3072:0A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:0zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e60386fb4556ccfe878ffb046f1b1d37_JaffaCakes118

    • Size

      188KB

    • MD5

      e60386fb4556ccfe878ffb046f1b1d37

    • SHA1

      a5c33c953d8e8e33a30dc36713e85469a7a0f3c8

    • SHA256

      a5d6ae83233e293061cbb6eae35b9a7687ffca5acfabddf01e1d833c3deb1197

    • SHA512

      f88eabc32b327ee9c17d94569d89475616dd1010715a1219cf80dddfad650fe74b76aee9dd0693a018a36d5eaa3f436881f611af73b4be13cbd01c34808f02c4

    • SSDEEP

      3072:0A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:0zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks