Overview

overview

10

Static

static

3

e57c0ae08f...18.dll

windows7-x64

10

e57c0ae08f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e57c0ae08f768cd51e6e480d607c00ed_JaffaCakes118

  • Size

    188KB

  • Sample

    240407-v59c3shh81

  • MD5

    e57c0ae08f768cd51e6e480d607c00ed

  • SHA1

    8d630b5b1903d5ecf7c2879d335bc541b1fe4c31

  • SHA256

    1f6d0a79cb5cbcbbb641c94a285ae1f8dd5bf9665e2438dfda96da7e254f9792

  • SHA512

    b1b54c1cd527e7ed78c7ef677c08dbed2188a4093cac476d192d92fe5ae083ef5f0a50e4ef8aeb56371ae9142dcabfc14c5323d6015de96908133a428a0e2948

  • SSDEEP

    3072:zA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAooo:zzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e57c0ae08f768cd51e6e480d607c00ed_JaffaCakes118

    • Size

      188KB

    • MD5

      e57c0ae08f768cd51e6e480d607c00ed

    • SHA1

      8d630b5b1903d5ecf7c2879d335bc541b1fe4c31

    • SHA256

      1f6d0a79cb5cbcbbb641c94a285ae1f8dd5bf9665e2438dfda96da7e254f9792

    • SHA512

      b1b54c1cd527e7ed78c7ef677c08dbed2188a4093cac476d192d92fe5ae083ef5f0a50e4ef8aeb56371ae9142dcabfc14c5323d6015de96908133a428a0e2948

    • SSDEEP

      3072:zA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAooo:zzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks