Overview

overview

10

Static

static

3

f239dea488...18.dll

windows7-x64

10

f239dea488...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f239dea4882b3a7546d8cc8e33f26050_JaffaCakes118

  • Size

    184KB

  • Sample

    240416-abjv4sbh53

  • MD5

    f239dea4882b3a7546d8cc8e33f26050

  • SHA1

    b382a503b559b287975febda2dad6ba16c0631ab

  • SHA256

    c0971e7ded0f21e6b2cf348587a6ffba3fe0823680985059d8f8f28119cebaff

  • SHA512

    55f793a5219db8f865bfb618e7f320de7fd1bad60ee8989a4be559cbc7c01795c745f116282b733747096cc5c3e01e4c85c14fa6acec196a818c0a588f63cef3

  • SSDEEP

    3072:mhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J5VQcY:m3fOeIv54W6SFKfc9me9v9/J5V

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      f239dea4882b3a7546d8cc8e33f26050_JaffaCakes118

    • Size

      184KB

    • MD5

      f239dea4882b3a7546d8cc8e33f26050

    • SHA1

      b382a503b559b287975febda2dad6ba16c0631ab

    • SHA256

      c0971e7ded0f21e6b2cf348587a6ffba3fe0823680985059d8f8f28119cebaff

    • SHA512

      55f793a5219db8f865bfb618e7f320de7fd1bad60ee8989a4be559cbc7c01795c745f116282b733747096cc5c3e01e4c85c14fa6acec196a818c0a588f63cef3

    • SSDEEP

      3072:mhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J5VQcY:m3fOeIv54W6SFKfc9me9v9/J5V

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks