Overview

overview

10

Static

static

3

f95bad3245...18.dll

windows7-x64

10

f95bad3245...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f95bad324573bde8c5e1a84f609f106a_JaffaCakes118

  • Size

    184KB

  • Sample

    240419-dh5myaeh56

  • MD5

    f95bad324573bde8c5e1a84f609f106a

  • SHA1

    b865cce931bc7ca634bf315e9f324f83bd7e3ffb

  • SHA256

    34152ee4c971341896ec57752aa6af55ed3135018ec0b13268cb86ff727f026c

  • SHA512

    6fa19891d91d05b5020cbbc4d054c6158c3eab9257813d0eef65c1f7d194e4916433c9601e6a3ed73c2f3ec6304c3ae0fe4594acfbe5a1863578e0ad43a03830

  • SSDEEP

    3072:4hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JOVQcY:43fOeIv54W6SFKfc9me9v9/JOV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      f95bad324573bde8c5e1a84f609f106a_JaffaCakes118

    • Size

      184KB

    • MD5

      f95bad324573bde8c5e1a84f609f106a

    • SHA1

      b865cce931bc7ca634bf315e9f324f83bd7e3ffb

    • SHA256

      34152ee4c971341896ec57752aa6af55ed3135018ec0b13268cb86ff727f026c

    • SHA512

      6fa19891d91d05b5020cbbc4d054c6158c3eab9257813d0eef65c1f7d194e4916433c9601e6a3ed73c2f3ec6304c3ae0fe4594acfbe5a1863578e0ad43a03830

    • SSDEEP

      3072:4hd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JOVQcY:43fOeIv54W6SFKfc9me9v9/JOV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks