Overview

overview

10

Static

static

3

faa41cd840...18.dll

windows7-x64

10

faa41cd840...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    faa41cd840abce38059a4ffc3b4385dc_JaffaCakes118

  • Size

    188KB

  • Sample

    240419-taqrtagc74

  • MD5

    faa41cd840abce38059a4ffc3b4385dc

  • SHA1

    d3f7f1c075a1d2d049b451e2db99b6bd328cbd77

  • SHA256

    5ce8fded69d07911ac26d078200f2e91bae4b4221c1f876aaa3e2275a5cbcc08

  • SHA512

    74da9c312ee6e38f4d38a183dd8347234c3e4bc55ae491641eba1694634558366bbb1614e67faf1cc4ef714dae0f20cf7560ab17ad9b402140d43f46924d6d83

  • SSDEEP

    3072:oxA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoHo:mzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      faa41cd840abce38059a4ffc3b4385dc_JaffaCakes118

    • Size

      188KB

    • MD5

      faa41cd840abce38059a4ffc3b4385dc

    • SHA1

      d3f7f1c075a1d2d049b451e2db99b6bd328cbd77

    • SHA256

      5ce8fded69d07911ac26d078200f2e91bae4b4221c1f876aaa3e2275a5cbcc08

    • SHA512

      74da9c312ee6e38f4d38a183dd8347234c3e4bc55ae491641eba1694634558366bbb1614e67faf1cc4ef714dae0f20cf7560ab17ad9b402140d43f46924d6d83

    • SSDEEP

      3072:oxA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoHo:mzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks