Overview

overview

10

Static

static

3

f389570341...18.dll

windows7-x64

10

f389570341...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3895703410910aa0ef2f7da6a12dd49_JaffaCakes118

  • Size

    175KB

  • Sample

    240416-p6cgvacd2w

  • MD5

    f3895703410910aa0ef2f7da6a12dd49

  • SHA1

    18a05909877ba997e3acda5426d5a28a4159c089

  • SHA256

    688bc9341860e2f04f307f162f71a628896bc6ca9fa200be54eee05a4b69cb72

  • SHA512

    9e7fb076d894f8ab933ad00b2d1e4dfc9d92e2608ec1efe41d08346be287991a6cdc3528eb93935bf07c2525af1008e5e4199e976fbb1f25906ef563e88f2c2b

  • SSDEEP

    3072:cC1Oe6ths2hyT0DzJfN3ZKU3YkmN5Sw4Q2kUl59Pn9ObAAW0f3:cC1Oem/DzJhok45X4HPYb

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

46.55.222.10:443

104.248.178.90:4664

173.212.243.155:7002
rc4.plain
rc4.plain

Targets

    • Target

      f3895703410910aa0ef2f7da6a12dd49_JaffaCakes118

    • Size

      175KB

    • MD5

      f3895703410910aa0ef2f7da6a12dd49

    • SHA1

      18a05909877ba997e3acda5426d5a28a4159c089

    • SHA256

      688bc9341860e2f04f307f162f71a628896bc6ca9fa200be54eee05a4b69cb72

    • SHA512

      9e7fb076d894f8ab933ad00b2d1e4dfc9d92e2608ec1efe41d08346be287991a6cdc3528eb93935bf07c2525af1008e5e4199e976fbb1f25906ef563e88f2c2b

    • SSDEEP

      3072:cC1Oe6ths2hyT0DzJfN3ZKU3YkmN5Sw4Q2kUl59Pn9ObAAW0f3:cC1Oem/DzJhok45X4HPYb

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks