Overview

overview

10

Static

static

3

f0f75efe50...18.dll

windows7-x64

10

f0f75efe50...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f0f75efe5092592eccfc88e65aad0250_JaffaCakes118

  • Size

    184KB

  • Sample

    240415-nrtbdafg3y

  • MD5

    f0f75efe5092592eccfc88e65aad0250

  • SHA1

    5f338beed60b7c08d46db36a380c42b332a3280b

  • SHA256

    53b9c5699f9039d55a0b7ce3621ca75686e711c65b72542a2e0e0916e4ab83b1

  • SHA512

    236000256f68d653a883b90d5d1074402639ee4b0c862f35742e38ac4bd29144bf9634a121038360db81d2a7483553663663ff65997a49ccef0ed1ebb200a8d3

  • SSDEEP

    3072:3hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J/VQcY:33fOeIv54W6SFKfc9me9v9/J/V

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      f0f75efe5092592eccfc88e65aad0250_JaffaCakes118

    • Size

      184KB

    • MD5

      f0f75efe5092592eccfc88e65aad0250

    • SHA1

      5f338beed60b7c08d46db36a380c42b332a3280b

    • SHA256

      53b9c5699f9039d55a0b7ce3621ca75686e711c65b72542a2e0e0916e4ab83b1

    • SHA512

      236000256f68d653a883b90d5d1074402639ee4b0c862f35742e38ac4bd29144bf9634a121038360db81d2a7483553663663ff65997a49ccef0ed1ebb200a8d3

    • SSDEEP

      3072:3hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J/VQcY:33fOeIv54W6SFKfc9me9v9/J/V

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks