Overview

overview

10

Static

static

3

e60ed8c384...18.dll

windows7-x64

10

e60ed8c384...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e60ed8c38427e7d0ac7b04735867ccd1_JaffaCakes118

  • Size

    188KB

  • Sample

    240407-2z33fahb5t

  • MD5

    e60ed8c38427e7d0ac7b04735867ccd1

  • SHA1

    46aea8c7e4db91b5b05bd41078b2f8480c1405c9

  • SHA256

    3113cc1a3f6ab018bf709e17f7d8a7d05b71a941aa113210020c621bd6c34b48

  • SHA512

    62edf671f3778d1c4555d19b80f9bfb83e09d10d15b9bc73751dba2a5ef846b74299c6c32c3efd356359e48ba31a2227ca3b64d88d5706556884c77284c1b300

  • SSDEEP

    3072:5H0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViW/7dU:5Uua/Pv7YNhRIEZDeXVpAxtMsxK

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e60ed8c38427e7d0ac7b04735867ccd1_JaffaCakes118

    • Size

      188KB

    • MD5

      e60ed8c38427e7d0ac7b04735867ccd1

    • SHA1

      46aea8c7e4db91b5b05bd41078b2f8480c1405c9

    • SHA256

      3113cc1a3f6ab018bf709e17f7d8a7d05b71a941aa113210020c621bd6c34b48

    • SHA512

      62edf671f3778d1c4555d19b80f9bfb83e09d10d15b9bc73751dba2a5ef846b74299c6c32c3efd356359e48ba31a2227ca3b64d88d5706556884c77284c1b300

    • SSDEEP

      3072:5H0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViW/7dU:5Uua/Pv7YNhRIEZDeXVpAxtMsxK

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks