Overview

overview

10

Static

static

3

f19a49d566...18.dll

windows7-x64

10

f19a49d566...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f19a49d56685c17992b96726759e32de_JaffaCakes118

  • Size

    188KB

  • Sample

    240415-v326zsec6y

  • MD5

    f19a49d56685c17992b96726759e32de

  • SHA1

    be261fb0df68a23054ec72feb5fbd0d8b9d6bc48

  • SHA256

    700f6e0d353a7ce8b04659a82a01ac502b83565cd68348041857157e1b8d9736

  • SHA512

    6d3d10069884effb1f48da87e9522de8274b80daa2b98314fcc4f9545b893161697bd905b6ae38e552121c9ced9126f0b44711d0a599eabd54f385046a34234c

  • SSDEEP

    3072:4A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAobo:4zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      f19a49d56685c17992b96726759e32de_JaffaCakes118

    • Size

      188KB

    • MD5

      f19a49d56685c17992b96726759e32de

    • SHA1

      be261fb0df68a23054ec72feb5fbd0d8b9d6bc48

    • SHA256

      700f6e0d353a7ce8b04659a82a01ac502b83565cd68348041857157e1b8d9736

    • SHA512

      6d3d10069884effb1f48da87e9522de8274b80daa2b98314fcc4f9545b893161697bd905b6ae38e552121c9ced9126f0b44711d0a599eabd54f385046a34234c

    • SSDEEP

      3072:4A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAobo:4zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks