Overview

overview

10

Static

static

3

f2b83aadbe...18.dll

windows7-x64

10

f2b83aadbe...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2b83aadbe3f8fff85387d229b26d299_JaffaCakes118

  • Size

    188KB

  • Sample

    240416-fc1sxahf73

  • MD5

    f2b83aadbe3f8fff85387d229b26d299

  • SHA1

    017136d5867f9b8f08b8a1b15ff1e6f6dbf5c238

  • SHA256

    53dfb55851a321d2cc165ddaf10f3acd9ee6649ba6072baf86642fbe21b2adaf

  • SHA512

    685679f03102bf6dd4d7ad17f2ec2b0c52bbf73886d3b0bef9adca877ce071fe01c3d0efff22411a22ae1f7cd10bd4f9f77f4d91d52bf4588b6e4c37b9b9fe18

  • SSDEEP

    3072:vA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:vzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      f2b83aadbe3f8fff85387d229b26d299_JaffaCakes118

    • Size

      188KB

    • MD5

      f2b83aadbe3f8fff85387d229b26d299

    • SHA1

      017136d5867f9b8f08b8a1b15ff1e6f6dbf5c238

    • SHA256

      53dfb55851a321d2cc165ddaf10f3acd9ee6649ba6072baf86642fbe21b2adaf

    • SHA512

      685679f03102bf6dd4d7ad17f2ec2b0c52bbf73886d3b0bef9adca877ce071fe01c3d0efff22411a22ae1f7cd10bd4f9f77f4d91d52bf4588b6e4c37b9b9fe18

    • SSDEEP

      3072:vA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:vzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks