Overview

overview

10

Static

static

3

f7f3b80818...18.dll

windows7-x64

10

f7f3b80818...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7f3b808180d0d7a498a9d7b022faf7a_JaffaCakes118

  • Size

    184KB

  • Sample

    240418-n7mtjacf92

  • MD5

    f7f3b808180d0d7a498a9d7b022faf7a

  • SHA1

    cbcdd285f86d3cf2c8474280b3eeff898e5e5e17

  • SHA256

    fa287fe02d71ed4b44938c6cb1f08854c8d8be976b5df11dca5d5719d7555799

  • SHA512

    e28766dfdc2120b2920888b36f73462f8187e25037dd964dd6e58c4850d597b6d47e93611c8606820e44ecd7591ef8e7b9dd0533a8be16ca44e4fd4ebe8b4776

  • SSDEEP

    3072:EcYhzpn9z75jWpmrL3gA99hXkKsorn+AOr4ROjvaT:EcIntom33RDvn+Rrxr

Score
10/10
dridex22203botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723
rc4.plain
rc4.plain

Targets

    • Target

      f7f3b808180d0d7a498a9d7b022faf7a_JaffaCakes118

    • Size

      184KB

    • MD5

      f7f3b808180d0d7a498a9d7b022faf7a

    • SHA1

      cbcdd285f86d3cf2c8474280b3eeff898e5e5e17

    • SHA256

      fa287fe02d71ed4b44938c6cb1f08854c8d8be976b5df11dca5d5719d7555799

    • SHA512

      e28766dfdc2120b2920888b36f73462f8187e25037dd964dd6e58c4850d597b6d47e93611c8606820e44ecd7591ef8e7b9dd0533a8be16ca44e4fd4ebe8b4776

    • SSDEEP

      3072:EcYhzpn9z75jWpmrL3gA99hXkKsorn+AOr4ROjvaT:EcIntom33RDvn+Rrxr

    Score
    10/10
    dridex22203botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks