Overview

overview

10

Static

static

3

e9eddd6503...18.dll

windows7-x64

10

e9eddd6503...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9eddd6503e04026a93220654a8f4642_JaffaCakes118

  • Size

    188KB

  • Sample

    240409-n2zk5shf41

  • MD5

    e9eddd6503e04026a93220654a8f4642

  • SHA1

    0aa27e5218cda00921a4d3c1ca60f0b331db12b4

  • SHA256

    c22334e321e868529c2da2ba644e3ebce8b5e28a4d765cb8536c27c7b654ec21

  • SHA512

    0adfd9be041ef71af1a200b079b5e37880200c9539b0785b2aa48a5b75301acd7cc11935bc62fc52eaa2fe6ece3f2dc8a4227b048048cf863ab4b09a03efc085

  • SSDEEP

    3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:izIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e9eddd6503e04026a93220654a8f4642_JaffaCakes118

    • Size

      188KB

    • MD5

      e9eddd6503e04026a93220654a8f4642

    • SHA1

      0aa27e5218cda00921a4d3c1ca60f0b331db12b4

    • SHA256

      c22334e321e868529c2da2ba644e3ebce8b5e28a4d765cb8536c27c7b654ec21

    • SHA512

      0adfd9be041ef71af1a200b079b5e37880200c9539b0785b2aa48a5b75301acd7cc11935bc62fc52eaa2fe6ece3f2dc8a4227b048048cf863ab4b09a03efc085

    • SSDEEP

      3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:izIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks