Overview

overview

10

Static

static

3

f57e39bf5f...18.dll

windows7-x64

10

f57e39bf5f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f57e39bf5f4a284e7b953d3cf135ee64_JaffaCakes118

  • Size

    184KB

  • Sample

    240417-lrsnqsch5y

  • MD5

    f57e39bf5f4a284e7b953d3cf135ee64

  • SHA1

    62b266e6a57a3f9b98e22ad15bf2672cf70c5a76

  • SHA256

    10a272430b0a905015618db2e69c0aecf65c4f529393392b5b220a4fef7f93af

  • SHA512

    110aafd103d0c394edd56cafdd68193c2c2e5f3631c20ebfcd7ead6af37c371ea9b766f8418e1aa610fbfe81bf458a633061e53c98d4f754a0971372c9016684

  • SSDEEP

    3072:mhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JKVQcY:m3fOeIv54W6SFKfc9me9v9/JKV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      f57e39bf5f4a284e7b953d3cf135ee64_JaffaCakes118

    • Size

      184KB

    • MD5

      f57e39bf5f4a284e7b953d3cf135ee64

    • SHA1

      62b266e6a57a3f9b98e22ad15bf2672cf70c5a76

    • SHA256

      10a272430b0a905015618db2e69c0aecf65c4f529393392b5b220a4fef7f93af

    • SHA512

      110aafd103d0c394edd56cafdd68193c2c2e5f3631c20ebfcd7ead6af37c371ea9b766f8418e1aa610fbfe81bf458a633061e53c98d4f754a0971372c9016684

    • SSDEEP

      3072:mhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JKVQcY:m3fOeIv54W6SFKfc9me9v9/JKV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks