Overview

overview

10

Static

static

3

eee295e811...18.dll

windows7-x64

10

eee295e811...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eee295e811b7c4691d736e0468306684_JaffaCakes118

  • Size

    188KB

  • Sample

    240412-clckwsfd8s

  • MD5

    eee295e811b7c4691d736e0468306684

  • SHA1

    f0e57625cbd4e19a0ae928fcc0a83b98ba16fadb

  • SHA256

    e32acfa4675d1e45f32284728bf78c21701366b15840a1b42245fa94b17c7fac

  • SHA512

    e656e704d47b9e053763dbb937c228443550a012f0cce0037cd1408f7ff445ba4eb8775c8d8ca0dd67b5e88196f4e48c1fea65d9088c142f52654b1c95ece573

  • SSDEEP

    3072:JA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoQo:JzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      eee295e811b7c4691d736e0468306684_JaffaCakes118

    • Size

      188KB

    • MD5

      eee295e811b7c4691d736e0468306684

    • SHA1

      f0e57625cbd4e19a0ae928fcc0a83b98ba16fadb

    • SHA256

      e32acfa4675d1e45f32284728bf78c21701366b15840a1b42245fa94b17c7fac

    • SHA512

      e656e704d47b9e053763dbb937c228443550a012f0cce0037cd1408f7ff445ba4eb8775c8d8ca0dd67b5e88196f4e48c1fea65d9088c142f52654b1c95ece573

    • SSDEEP

      3072:JA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoQo:JzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks