Overview

overview

10

Static

static

3

ebd5248bbb...18.dll

windows7-x64

10

ebd5248bbb...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebd5248bbbb851ebce7ce7b42ff79644_JaffaCakes118

  • Size

    184KB

  • Sample

    240410-yagw5ahe57

  • MD5

    ebd5248bbbb851ebce7ce7b42ff79644

  • SHA1

    156eda8bc102ce02c7842eb7eb203400356912b7

  • SHA256

    8293350a992aa245fadd81186099b0e420d6b2fc458d8f5e5d0bc054d67a7b36

  • SHA512

    343b44e3fdfd6dfb2c6d7a8a317bf32edf3209450b8eeac8f7b8c332c342387a4f94d1573b56ffd5c152dd8505d0a3371b009ec1a141122298875913ea873a8e

  • SSDEEP

    3072:yhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JkVQcY:y3fOeIv54W6SFKfc9me9v9/JkV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      ebd5248bbbb851ebce7ce7b42ff79644_JaffaCakes118

    • Size

      184KB

    • MD5

      ebd5248bbbb851ebce7ce7b42ff79644

    • SHA1

      156eda8bc102ce02c7842eb7eb203400356912b7

    • SHA256

      8293350a992aa245fadd81186099b0e420d6b2fc458d8f5e5d0bc054d67a7b36

    • SHA512

      343b44e3fdfd6dfb2c6d7a8a317bf32edf3209450b8eeac8f7b8c332c342387a4f94d1573b56ffd5c152dd8505d0a3371b009ec1a141122298875913ea873a8e

    • SSDEEP

      3072:yhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JkVQcY:y3fOeIv54W6SFKfc9me9v9/JkV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks