Overview

overview

10

Static

static

3

f315032bbc...18.dll

windows7-x64

10

f315032bbc...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f315032bbc064169239e0d596719cbd4_JaffaCakes118

  • Size

    188KB

  • Sample

    240416-j91e7adc69

  • MD5

    f315032bbc064169239e0d596719cbd4

  • SHA1

    4cb9c0c45fbd4a9b1a9ad5a49af665ff2ccdc6eb

  • SHA256

    99d23b25174684e201f029b80cfd9061ef310a45ea4a26c7af1e4e4d81e35f05

  • SHA512

    67e344a3452437e827fd5e9912e16174dcfc0f9efc49e7af142b6a8296335c5ed578858123c80f46105cc542ff47c32606bfab5f5f61386f5d5d03a2bf4e082b

  • SSDEEP

    3072:zA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoyo:zzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      f315032bbc064169239e0d596719cbd4_JaffaCakes118

    • Size

      188KB

    • MD5

      f315032bbc064169239e0d596719cbd4

    • SHA1

      4cb9c0c45fbd4a9b1a9ad5a49af665ff2ccdc6eb

    • SHA256

      99d23b25174684e201f029b80cfd9061ef310a45ea4a26c7af1e4e4d81e35f05

    • SHA512

      67e344a3452437e827fd5e9912e16174dcfc0f9efc49e7af142b6a8296335c5ed578858123c80f46105cc542ff47c32606bfab5f5f61386f5d5d03a2bf4e082b

    • SSDEEP

      3072:zA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoyo:zzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks