Overview

overview

10

Static

static

3

e4c11a608a...18.dll

windows7-x64

10

e4c11a608a...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4c11a608adc12f626806cb1386bf8bb_JaffaCakes118

  • Size

    188KB

  • Sample

    240407-mz79tsbb3t

  • MD5

    e4c11a608adc12f626806cb1386bf8bb

  • SHA1

    a748d51fdd1ed85e3e765ee99835a8c6fcdf9796

  • SHA256

    f6420b53196aa7d8fb8ea1efbbba74e52a63acf1f0c61e7a1ce55514898c27d9

  • SHA512

    e6ed50f4f6c5ff2bbb1db451eba27d2375dcaad131a0bd1d9a53f087ab392b2b18cc683e786c8a12bdedfcccd1de3b95289fed43e572b3ee2a735dde1dfbc5d7

  • SSDEEP

    3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo0o:/zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e4c11a608adc12f626806cb1386bf8bb_JaffaCakes118

    • Size

      188KB

    • MD5

      e4c11a608adc12f626806cb1386bf8bb

    • SHA1

      a748d51fdd1ed85e3e765ee99835a8c6fcdf9796

    • SHA256

      f6420b53196aa7d8fb8ea1efbbba74e52a63acf1f0c61e7a1ce55514898c27d9

    • SHA512

      e6ed50f4f6c5ff2bbb1db451eba27d2375dcaad131a0bd1d9a53f087ab392b2b18cc683e786c8a12bdedfcccd1de3b95289fed43e572b3ee2a735dde1dfbc5d7

    • SSDEEP

      3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo0o:/zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks