Overview

overview

10

Static

static

3

ec35ee8a87...18.dll

windows7-x64

10

ec35ee8a87...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec35ee8a8729f962e85dbbfa3cdd45a5_JaffaCakes118

  • Size

    188KB

  • Sample

    240410-3dbazaeb23

  • MD5

    ec35ee8a8729f962e85dbbfa3cdd45a5

  • SHA1

    a9b0637f05de8e889ba05a05b70f1f56297be542

  • SHA256

    3fca540bb41b9f7cd1429e879a610e2def3a93799070d3831126e4c66873ac38

  • SHA512

    cdffe8c279f34833ac8ffdb9d52d99a7a2494557446b3df337de2be502f16f4a52c42990b657bd0188fec5050b8d52c5ba1abb958e43eda93ae0a0bb44a412e7

  • SSDEEP

    3072:WA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoSo:WzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      ec35ee8a8729f962e85dbbfa3cdd45a5_JaffaCakes118

    • Size

      188KB

    • MD5

      ec35ee8a8729f962e85dbbfa3cdd45a5

    • SHA1

      a9b0637f05de8e889ba05a05b70f1f56297be542

    • SHA256

      3fca540bb41b9f7cd1429e879a610e2def3a93799070d3831126e4c66873ac38

    • SHA512

      cdffe8c279f34833ac8ffdb9d52d99a7a2494557446b3df337de2be502f16f4a52c42990b657bd0188fec5050b8d52c5ba1abb958e43eda93ae0a0bb44a412e7

    • SSDEEP

      3072:WA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoSo:WzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks