Overview

overview

10

Static

static

3

f8fb255f08...18.dll

windows7-x64

10

f8fb255f08...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8fb255f08501ed5a3fa0d9268d7263c_JaffaCakes118

  • Size

    188KB

  • Sample

    240418-3dryqaba5w

  • MD5

    f8fb255f08501ed5a3fa0d9268d7263c

  • SHA1

    86731e6d77f4e000c3d54766a6a276e467650295

  • SHA256

    9f08539f0515bc63237ce25dbdd4537fefd873209fc0bb5814c47c90d889ddfb

  • SHA512

    dc555fe15fc08ee822e4c8509e2972ff4ef0c101607ec74d223b1622b7e906bc2855cbce32d3a92e52d951024b3deaba914963cec3b2673f33e86cb216c9183b

  • SSDEEP

    3072:6A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:6zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      f8fb255f08501ed5a3fa0d9268d7263c_JaffaCakes118

    • Size

      188KB

    • MD5

      f8fb255f08501ed5a3fa0d9268d7263c

    • SHA1

      86731e6d77f4e000c3d54766a6a276e467650295

    • SHA256

      9f08539f0515bc63237ce25dbdd4537fefd873209fc0bb5814c47c90d889ddfb

    • SHA512

      dc555fe15fc08ee822e4c8509e2972ff4ef0c101607ec74d223b1622b7e906bc2855cbce32d3a92e52d951024b3deaba914963cec3b2673f33e86cb216c9183b

    • SSDEEP

      3072:6A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:6zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks