Overview

overview

10

Static

static

3

f206d97bb2...18.dll

windows7-x64

10

f206d97bb2...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f206d97bb2a77b0a7a63d085beff8447_JaffaCakes118

  • Size

    188KB

  • Sample

    240415-1xwd5sbe7w

  • MD5

    f206d97bb2a77b0a7a63d085beff8447

  • SHA1

    581170a15aefef47b3101cc203cbfc01368cafb2

  • SHA256

    9e93822af9280e086df03955fd943cc8d9fe523d0b900382ebd62077589aee7d

  • SHA512

    9a2d5000321522604460b5db8a4f532400225a9f160a4de5c60a1a7d9e63074f43e27bcae3437d398f921379f7e0c25e30a8869a33d9dd9eaffc61d004a205ca

  • SSDEEP

    3072:6A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAobo:6zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      f206d97bb2a77b0a7a63d085beff8447_JaffaCakes118

    • Size

      188KB

    • MD5

      f206d97bb2a77b0a7a63d085beff8447

    • SHA1

      581170a15aefef47b3101cc203cbfc01368cafb2

    • SHA256

      9e93822af9280e086df03955fd943cc8d9fe523d0b900382ebd62077589aee7d

    • SHA512

      9a2d5000321522604460b5db8a4f532400225a9f160a4de5c60a1a7d9e63074f43e27bcae3437d398f921379f7e0c25e30a8869a33d9dd9eaffc61d004a205ca

    • SSDEEP

      3072:6A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAobo:6zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks