Overview

overview

10

Static

static

3

ef39f74f5e...18.dll

windows7-x64

10

ef39f74f5e...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef39f74f5e0d4eca6602b972b7b8cb95_JaffaCakes118

  • Size

    188KB

  • Sample

    240412-f363lsag6t

  • MD5

    ef39f74f5e0d4eca6602b972b7b8cb95

  • SHA1

    460ba3c51f96b5327f68ee1ccef0e0b33187232b

  • SHA256

    9f99ee8cc9e39cc5a5a1cb51c651f7c0c9265cc6f56cd0b180f069f93a0b5aa5

  • SHA512

    603876bba7b6344a3dee1ff23f7afddb4de71fe0a3a2b035803ee58a901535bde490a7162a8553c43c392dc1fb28b62e1e7dbd843e93e69a163aa9cf6ba2734f

  • SSDEEP

    3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo1o:izIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      ef39f74f5e0d4eca6602b972b7b8cb95_JaffaCakes118

    • Size

      188KB

    • MD5

      ef39f74f5e0d4eca6602b972b7b8cb95

    • SHA1

      460ba3c51f96b5327f68ee1ccef0e0b33187232b

    • SHA256

      9f99ee8cc9e39cc5a5a1cb51c651f7c0c9265cc6f56cd0b180f069f93a0b5aa5

    • SHA512

      603876bba7b6344a3dee1ff23f7afddb4de71fe0a3a2b035803ee58a901535bde490a7162a8553c43c392dc1fb28b62e1e7dbd843e93e69a163aa9cf6ba2734f

    • SSDEEP

      3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo1o:izIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks