Overview

overview

10

Static

static

3

f468783237...18.dll

windows7-x64

10

f468783237...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4687832376117e3ce00d6e3d65b485e_JaffaCakes118

  • Size

    184KB

  • Sample

    240416-1rs2tsdf32

  • MD5

    f4687832376117e3ce00d6e3d65b485e

  • SHA1

    e53de514b538696df721963b4cfc4aaa1f207b85

  • SHA256

    4662e5c93bfd979dee418e72ab83b86b41e048132a2a9c3123b2032649168989

  • SHA512

    3eb418ce1c0f13bbac96e3c9960fa5e5c86966c40e648a7367335d0d928618ee7c7e2372190b095dd7207c3f19a94f2b39bcabe8ab0fd3b59ae00f4a5ba46c6a

  • SSDEEP

    3072:nhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J4VQcY:n3fOeIv54W6SFKfc9me9v9/J4V

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      f4687832376117e3ce00d6e3d65b485e_JaffaCakes118

    • Size

      184KB

    • MD5

      f4687832376117e3ce00d6e3d65b485e

    • SHA1

      e53de514b538696df721963b4cfc4aaa1f207b85

    • SHA256

      4662e5c93bfd979dee418e72ab83b86b41e048132a2a9c3123b2032649168989

    • SHA512

      3eb418ce1c0f13bbac96e3c9960fa5e5c86966c40e648a7367335d0d928618ee7c7e2372190b095dd7207c3f19a94f2b39bcabe8ab0fd3b59ae00f4a5ba46c6a

    • SSDEEP

      3072:nhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J4VQcY:n3fOeIv54W6SFKfc9me9v9/J4V

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks