Overview

overview

10

Static

static

3

fa2fd6f406...18.dll

windows7-x64

10

fa2fd6f406...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa2fd6f4066a389037fbb027fe9e7af0_JaffaCakes118

  • Size

    188KB

  • Sample

    240419-nffwxaac78

  • MD5

    fa2fd6f4066a389037fbb027fe9e7af0

  • SHA1

    5b360c32a51564e19ae8d30b15b9e178cc76320f

  • SHA256

    970e504b98e72c0c1b75553c8a4c77ada4072404600a7b2a2cf5651e76577761

  • SHA512

    385ecb36e6adb3b7bcfc20d6ac1e3974378f38a2927a9311c717c1491a2f970bd3ab165371011e3fae7a16810cb2a4ee5bfc9fb24f808584e67759ec7c266e20

  • SSDEEP

    3072:VA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:VzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fa2fd6f4066a389037fbb027fe9e7af0_JaffaCakes118

    • Size

      188KB

    • MD5

      fa2fd6f4066a389037fbb027fe9e7af0

    • SHA1

      5b360c32a51564e19ae8d30b15b9e178cc76320f

    • SHA256

      970e504b98e72c0c1b75553c8a4c77ada4072404600a7b2a2cf5651e76577761

    • SHA512

      385ecb36e6adb3b7bcfc20d6ac1e3974378f38a2927a9311c717c1491a2f970bd3ab165371011e3fae7a16810cb2a4ee5bfc9fb24f808584e67759ec7c266e20

    • SSDEEP

      3072:VA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:VzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks