Overview

overview

10

Static

static

3

e581978e1e...18.dll

windows7-x64

10

e581978e1e...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e581978e1ed692b22a22feb85ce49950_JaffaCakes118

  • Size

    184KB

  • Sample

    240407-wdpp2aab6v

  • MD5

    e581978e1ed692b22a22feb85ce49950

  • SHA1

    71654e92b60d98ff77bd5725ab2004329b91fb58

  • SHA256

    7a1f22e975b79f5246122e3eadec252b6c278aa9ae96a86e09230d82c3e68a69

  • SHA512

    d0e38180d27be2deee73beaf389a58a0549677fd425e4921ccdf6a9137b02ed768855d75e33c916cb3912c58f5e0d5f760a90fa5d7c1e2346466b4370cc9d4b9

  • SSDEEP

    3072:uhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JEVQcY:u3fOeIv54W6SFKfc9me9v9/JEV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      e581978e1ed692b22a22feb85ce49950_JaffaCakes118

    • Size

      184KB

    • MD5

      e581978e1ed692b22a22feb85ce49950

    • SHA1

      71654e92b60d98ff77bd5725ab2004329b91fb58

    • SHA256

      7a1f22e975b79f5246122e3eadec252b6c278aa9ae96a86e09230d82c3e68a69

    • SHA512

      d0e38180d27be2deee73beaf389a58a0549677fd425e4921ccdf6a9137b02ed768855d75e33c916cb3912c58f5e0d5f760a90fa5d7c1e2346466b4370cc9d4b9

    • SSDEEP

      3072:uhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JEVQcY:u3fOeIv54W6SFKfc9me9v9/JEV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks