Overview

overview

10

Static

static

3

e5c7233e5d...18.dll

windows7-x64

10

e5c7233e5d...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e5c7233e5dd8f21b824fdc705cff0dd9_JaffaCakes118

  • Size

    188KB

  • Sample

    240407-y4dfssdh39

  • MD5

    e5c7233e5dd8f21b824fdc705cff0dd9

  • SHA1

    95cacecbe72ee2c8d89fbf95bf96f4c67b669ba1

  • SHA256

    8c4a04be9516e253bebf312212ccc4385f602bc93a893b099f8d016731b8d325

  • SHA512

    311bf3860b7f42f3c3397e63de987975864a48dff02c66586a92422147e2c2fcc2a14130cfc358a12b4533341dac55af7599d71a7b05e49971273f5f1c75ac54

  • SSDEEP

    3072:DA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAovo:DzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e5c7233e5dd8f21b824fdc705cff0dd9_JaffaCakes118

    • Size

      188KB

    • MD5

      e5c7233e5dd8f21b824fdc705cff0dd9

    • SHA1

      95cacecbe72ee2c8d89fbf95bf96f4c67b669ba1

    • SHA256

      8c4a04be9516e253bebf312212ccc4385f602bc93a893b099f8d016731b8d325

    • SHA512

      311bf3860b7f42f3c3397e63de987975864a48dff02c66586a92422147e2c2fcc2a14130cfc358a12b4533341dac55af7599d71a7b05e49971273f5f1c75ac54

    • SSDEEP

      3072:DA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAovo:DzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks