Overview

overview

10

Static

static

3

f5c5b3796a...18.dll

windows7-x64

10

f5c5b3796a...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5c5b3796a6a09ad95f677a6abc8d7ac_JaffaCakes118

  • Size

    188KB

  • Sample

    240417-ppdctaeh67

  • MD5

    f5c5b3796a6a09ad95f677a6abc8d7ac

  • SHA1

    2c8b5db1f84c3a965564edbd5fc8819ad58a0b89

  • SHA256

    522b0aba30c6d33ff4e6edfc04f417e91ec5ee3c37e84c21da5728218cde0453

  • SHA512

    ce09cadbdd73d96907d9bf3cbceb3999462907ecbe2bbec8417381af410310dd8395accc019e6d405006d1f596e156bb28476f7f7f456da52366943d74a5d37e

  • SSDEEP

    3072:QA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo5o:QzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      f5c5b3796a6a09ad95f677a6abc8d7ac_JaffaCakes118

    • Size

      188KB

    • MD5

      f5c5b3796a6a09ad95f677a6abc8d7ac

    • SHA1

      2c8b5db1f84c3a965564edbd5fc8819ad58a0b89

    • SHA256

      522b0aba30c6d33ff4e6edfc04f417e91ec5ee3c37e84c21da5728218cde0453

    • SHA512

      ce09cadbdd73d96907d9bf3cbceb3999462907ecbe2bbec8417381af410310dd8395accc019e6d405006d1f596e156bb28476f7f7f456da52366943d74a5d37e

    • SSDEEP

      3072:QA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo5o:QzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks