Overview

overview

10

Static

static

3

eac0a6d816...18.dll

windows7-x64

10

eac0a6d816...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eac0a6d8169ea4d20bcde105e15e0ebb_JaffaCakes118

  • Size

    188KB

  • Sample

    240410-ldtnwaad95

  • MD5

    eac0a6d8169ea4d20bcde105e15e0ebb

  • SHA1

    92d2122b46b6e57f2c53f036bd5316093e49ca38

  • SHA256

    2119aaf3a1458dbe0bb0d1f81a7234a9f4e38a34c84241337fe972c7dd4e80db

  • SHA512

    610a859535a1559bcda0b3be19cadd8e307b15b8acae576fb3508766d6f8bab8729d6321c748f7c3ed64626ca2557c81b28fd904f90d05caaa40c8bdfc48a9ba

  • SSDEEP

    3072:kA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoLo:kzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      eac0a6d8169ea4d20bcde105e15e0ebb_JaffaCakes118

    • Size

      188KB

    • MD5

      eac0a6d8169ea4d20bcde105e15e0ebb

    • SHA1

      92d2122b46b6e57f2c53f036bd5316093e49ca38

    • SHA256

      2119aaf3a1458dbe0bb0d1f81a7234a9f4e38a34c84241337fe972c7dd4e80db

    • SHA512

      610a859535a1559bcda0b3be19cadd8e307b15b8acae576fb3508766d6f8bab8729d6321c748f7c3ed64626ca2557c81b28fd904f90d05caaa40c8bdfc48a9ba

    • SSDEEP

      3072:kA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoLo:kzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks