Overview

overview

10

Static

static

3

ee5432d573...18.dll

windows7-x64

10

ee5432d573...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee5432d5737726f7e8a1be9c6f63f79c_JaffaCakes118

  • Size

    188KB

  • Sample

    240411-zsltgagc5s

  • MD5

    ee5432d5737726f7e8a1be9c6f63f79c

  • SHA1

    8ca89d119610d6a4f755368446b47926caf57ce2

  • SHA256

    135f7ad1eb7b9635e244fd46bead2550983577f1c1c265e989a9deb7fcc53ed7

  • SHA512

    98fa772ee8f1ce588332084f082e349573cbb603a8a8a5192a93f844e129d84cd7bdd397bb68be9f5498df65fbab3df9633eb0e1d458dda33948d1e370cf5540

  • SSDEEP

    3072:fA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoWo:fzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      ee5432d5737726f7e8a1be9c6f63f79c_JaffaCakes118

    • Size

      188KB

    • MD5

      ee5432d5737726f7e8a1be9c6f63f79c

    • SHA1

      8ca89d119610d6a4f755368446b47926caf57ce2

    • SHA256

      135f7ad1eb7b9635e244fd46bead2550983577f1c1c265e989a9deb7fcc53ed7

    • SHA512

      98fa772ee8f1ce588332084f082e349573cbb603a8a8a5192a93f844e129d84cd7bdd397bb68be9f5498df65fbab3df9633eb0e1d458dda33948d1e370cf5540

    • SSDEEP

      3072:fA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoWo:fzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks