Overview

overview

10

Static

static

3

f48262fbfc...18.dll

windows7-x64

10

f48262fbfc...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f48262fbfc5486fb9b7788ad5a68f9bb_JaffaCakes118

  • Size

    188KB

  • Sample

    240416-2vrtlsgd2v

  • MD5

    f48262fbfc5486fb9b7788ad5a68f9bb

  • SHA1

    7f04a15f28925960d55804b8769d22517afb4133

  • SHA256

    98f39070de6dbff083881c6cd6d5cb5e7cefeb6d59c62fdc2bebbfae935d457f

  • SHA512

    18e6095df88ee32963ae77eae9d6a9170fc7119c9da5c6f00e92af09df1ae83ed5ebe62f29d1976220c8137b221fcd325654cf84233e1ee6bd0638a28af35264

  • SSDEEP

    3072:JA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoQo:JzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      f48262fbfc5486fb9b7788ad5a68f9bb_JaffaCakes118

    • Size

      188KB

    • MD5

      f48262fbfc5486fb9b7788ad5a68f9bb

    • SHA1

      7f04a15f28925960d55804b8769d22517afb4133

    • SHA256

      98f39070de6dbff083881c6cd6d5cb5e7cefeb6d59c62fdc2bebbfae935d457f

    • SHA512

      18e6095df88ee32963ae77eae9d6a9170fc7119c9da5c6f00e92af09df1ae83ed5ebe62f29d1976220c8137b221fcd325654cf84233e1ee6bd0638a28af35264

    • SSDEEP

      3072:JA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoQo:JzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks