Overview

overview

10

Static

static

3

fb6351a2a5...18.dll

windows7-x64

10

fb6351a2a5...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb6351a2a5c22aabc24edef61db27f58_JaffaCakes118

  • Size

    188KB

  • Sample

    240419-288z2saa97

  • MD5

    fb6351a2a5c22aabc24edef61db27f58

  • SHA1

    6abac9b06892dee05937a646bacb21a5e9a1f0dd

  • SHA256

    24a5705ffd6751e29d46c7f1eec75a464bcc604bebb7abdca8fbf842288d8bdf

  • SHA512

    ed94917b3220983c00e72b58beac1a9cfdf2f082ea32bab41297495a6250b2d8be176c25d444937311d4a22d7156171ac25172fbcac221f0c43da28b36cf5f87

  • SSDEEP

    3072:OA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAolo:OzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fb6351a2a5c22aabc24edef61db27f58_JaffaCakes118

    • Size

      188KB

    • MD5

      fb6351a2a5c22aabc24edef61db27f58

    • SHA1

      6abac9b06892dee05937a646bacb21a5e9a1f0dd

    • SHA256

      24a5705ffd6751e29d46c7f1eec75a464bcc604bebb7abdca8fbf842288d8bdf

    • SHA512

      ed94917b3220983c00e72b58beac1a9cfdf2f082ea32bab41297495a6250b2d8be176c25d444937311d4a22d7156171ac25172fbcac221f0c43da28b36cf5f87

    • SSDEEP

      3072:OA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAolo:OzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks