Overview

overview

10

Static

static

3

e8311b3999...18.dll

windows7-x64

10

e8311b3999...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8311b3999af60348ad98b9dc6dde650_JaffaCakes118

  • Size

    188KB

  • Sample

    240408-xs5kgahb77

  • MD5

    e8311b3999af60348ad98b9dc6dde650

  • SHA1

    a6c4da35be08ef755a0fd74a09690617f86fb8f6

  • SHA256

    9af460ab0960f4c8afd3edfeed0ffb879bf25672bda077a25d36929daba727f0

  • SHA512

    a5ef3c8453c2fc6c63d56bfbc2505265837ea53e2ffc2fe476fcde8caaea02d33c2a988cbaf452d753810734afdc1b2dfb24b00f4349c9177779abcab9783682

  • SSDEEP

    3072:EH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWZ7dU:EUua/Pv7YNhRIEZDeXVpAxtMsxK

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e8311b3999af60348ad98b9dc6dde650_JaffaCakes118

    • Size

      188KB

    • MD5

      e8311b3999af60348ad98b9dc6dde650

    • SHA1

      a6c4da35be08ef755a0fd74a09690617f86fb8f6

    • SHA256

      9af460ab0960f4c8afd3edfeed0ffb879bf25672bda077a25d36929daba727f0

    • SHA512

      a5ef3c8453c2fc6c63d56bfbc2505265837ea53e2ffc2fe476fcde8caaea02d33c2a988cbaf452d753810734afdc1b2dfb24b00f4349c9177779abcab9783682

    • SSDEEP

      3072:EH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWZ7dU:EUua/Pv7YNhRIEZDeXVpAxtMsxK

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks