Overview

overview

10

Static

static

3

e757e13ecd...18.dll

windows7-x64

10

e757e13ecd...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e757e13ecddbe864da3af5dc4f60d884_JaffaCakes118

  • Size

    188KB

  • Sample

    240408-nghf5abc31

  • MD5

    e757e13ecddbe864da3af5dc4f60d884

  • SHA1

    c57bc71613aed71197dc056583e2354d59d89662

  • SHA256

    9e41683d1143256df28a4be4cb848763f1be23f2f6819fbc4451383957c161d3

  • SHA512

    7dd1f8b58d1480acaef24f91eb87e16f4cbeb3bcd48a0449583ff7bc62e22463d66cd608f6180a08b91482616cf99d747255f8f7a33c45625144715386b0f6bc

  • SSDEEP

    3072:TA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoro:TzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e757e13ecddbe864da3af5dc4f60d884_JaffaCakes118

    • Size

      188KB

    • MD5

      e757e13ecddbe864da3af5dc4f60d884

    • SHA1

      c57bc71613aed71197dc056583e2354d59d89662

    • SHA256

      9e41683d1143256df28a4be4cb848763f1be23f2f6819fbc4451383957c161d3

    • SHA512

      7dd1f8b58d1480acaef24f91eb87e16f4cbeb3bcd48a0449583ff7bc62e22463d66cd608f6180a08b91482616cf99d747255f8f7a33c45625144715386b0f6bc

    • SSDEEP

      3072:TA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoro:TzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks