Overview

overview

10

Static

static

3

e7f6344bd2...18.dll

windows7-x64

10

e7f6344bd2...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7f6344bd2904c06e94907ef084420e0_JaffaCakes118

  • Size

    188KB

  • Sample

    240408-vhj5nshg2y

  • MD5

    e7f6344bd2904c06e94907ef084420e0

  • SHA1

    6973e075a4308422136015b6707e9ddc21f5b4bd

  • SHA256

    85393ad36d820c6a8db7a6bad1579f13e7586165f8a7e9bb4ddeffcc4792c333

  • SHA512

    e3e19dd1574fcb2b9cc6a30725c0f2d3d026c604c47ddf239034161bd21ba4e573849c8c424635f7cb13f2ba08387c02c10282efd2feca5f4b779eca0c89ad34

  • SSDEEP

    3072:7A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoBo:7zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e7f6344bd2904c06e94907ef084420e0_JaffaCakes118

    • Size

      188KB

    • MD5

      e7f6344bd2904c06e94907ef084420e0

    • SHA1

      6973e075a4308422136015b6707e9ddc21f5b4bd

    • SHA256

      85393ad36d820c6a8db7a6bad1579f13e7586165f8a7e9bb4ddeffcc4792c333

    • SHA512

      e3e19dd1574fcb2b9cc6a30725c0f2d3d026c604c47ddf239034161bd21ba4e573849c8c424635f7cb13f2ba08387c02c10282efd2feca5f4b779eca0c89ad34

    • SSDEEP

      3072:7A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoBo:7zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks