Overview

overview

10

Static

static

3

e7fdf04a0c...18.dll

windows7-x64

10

e7fdf04a0c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7fdf04a0c4d7b5e1146f60a0ae47e29_JaffaCakes118

  • Size

    188KB

  • Sample

    240408-vrx3wshh71

  • MD5

    e7fdf04a0c4d7b5e1146f60a0ae47e29

  • SHA1

    170b930c9927c6e293dcd755512ed2d9cc0795c4

  • SHA256

    8bf3ff4e1a15e78c670dc93e8b3ddf08d5745b920c4ea6697bb689a9b065ed40

  • SHA512

    bc7eb481b51f1f08ef48608b50545f905d2d9f7dd3424bf6f1a5f01c6e950b0c0878abb14281b6982ffbbbb0e602db4f8e9dbedb210f3b71e4984fb541d6218d

  • SSDEEP

    3072:CA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoOo:CzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e7fdf04a0c4d7b5e1146f60a0ae47e29_JaffaCakes118

    • Size

      188KB

    • MD5

      e7fdf04a0c4d7b5e1146f60a0ae47e29

    • SHA1

      170b930c9927c6e293dcd755512ed2d9cc0795c4

    • SHA256

      8bf3ff4e1a15e78c670dc93e8b3ddf08d5745b920c4ea6697bb689a9b065ed40

    • SHA512

      bc7eb481b51f1f08ef48608b50545f905d2d9f7dd3424bf6f1a5f01c6e950b0c0878abb14281b6982ffbbbb0e602db4f8e9dbedb210f3b71e4984fb541d6218d

    • SSDEEP

      3072:CA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoOo:CzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks