Overview

overview

10

Static

static

3

f2ef0e6fc5...18.dll

windows7-x64

10

f2ef0e6fc5...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2ef0e6fc55c659dc9c11c1000e4a7c9_JaffaCakes118

  • Size

    184KB

  • Sample

    240416-hnqs7ade9v

  • MD5

    f2ef0e6fc55c659dc9c11c1000e4a7c9

  • SHA1

    b15680f10f660ae8ff5c9c0943745949202573c0

  • SHA256

    9c4a31023bd832197680e8ff48094c5abdc01a0eb338a2629123d11c72529bec

  • SHA512

    8475ac0e8b598133ffa06a36ea98494839a6c41b3f6a6523e4a8ea88914cf441f74d53e6681926d84ec3c4adb787799511749b42333f073c30010051c6a8c0e5

  • SSDEEP

    3072:8hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JGVQcY:83fOeIv54W6SFKfc9me9v9/JGV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      f2ef0e6fc55c659dc9c11c1000e4a7c9_JaffaCakes118

    • Size

      184KB

    • MD5

      f2ef0e6fc55c659dc9c11c1000e4a7c9

    • SHA1

      b15680f10f660ae8ff5c9c0943745949202573c0

    • SHA256

      9c4a31023bd832197680e8ff48094c5abdc01a0eb338a2629123d11c72529bec

    • SHA512

      8475ac0e8b598133ffa06a36ea98494839a6c41b3f6a6523e4a8ea88914cf441f74d53e6681926d84ec3c4adb787799511749b42333f073c30010051c6a8c0e5

    • SSDEEP

      3072:8hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JGVQcY:83fOeIv54W6SFKfc9me9v9/JGV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks