Overview

overview

10

Static

static

3

ece9fd176f...18.dll

windows7-x64

10

ece9fd176f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ece9fd176f4a88fe71e1fe92168846b6_JaffaCakes118

  • Size

    188KB

  • Sample

    240411-jkzglaaa8w

  • MD5

    ece9fd176f4a88fe71e1fe92168846b6

  • SHA1

    507ea643b9eb198dc81d930a6f448a082767f446

  • SHA256

    9b70a0501c2f920b9885e78e389268a241f4e88eb161d9cf434915c03d7d4695

  • SHA512

    92caade81969ee51ab605fb05f447d30f1b4d8ff3ad9f5faa0dc131110b097d84da2f64f204d7414f8b093d4ee3f4a07f1870adedf56e3b2b61c61f2bcda0198

  • SSDEEP

    3072:FA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo6o:FzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      ece9fd176f4a88fe71e1fe92168846b6_JaffaCakes118

    • Size

      188KB

    • MD5

      ece9fd176f4a88fe71e1fe92168846b6

    • SHA1

      507ea643b9eb198dc81d930a6f448a082767f446

    • SHA256

      9b70a0501c2f920b9885e78e389268a241f4e88eb161d9cf434915c03d7d4695

    • SHA512

      92caade81969ee51ab605fb05f447d30f1b4d8ff3ad9f5faa0dc131110b097d84da2f64f204d7414f8b093d4ee3f4a07f1870adedf56e3b2b61c61f2bcda0198

    • SSDEEP

      3072:FA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo6o:FzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks