Overview

overview

10

Static

static

3

fb08c2c8d7...18.dll

windows7-x64

10

fb08c2c8d7...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb08c2c8d74ad6f3b7312353499e9370_JaffaCakes118

  • Size

    188KB

  • Sample

    240419-yfmdssed9t

  • MD5

    fb08c2c8d74ad6f3b7312353499e9370

  • SHA1

    4d5ef824c0d86144c935417e43c65ba6824b73b7

  • SHA256

    626616d9a0808bd05e6c3bb6b236903852820adb7e5171826f2e71ec2afc11a5

  • SHA512

    5d43641b16df404d5b030a8d66d2af31b6def86043b6f5e425accd4582c5a5e83ae859fee61df02296ea4c711c8901a4cb308a1ca5ef4bbee155165fb2389ede

  • SSDEEP

    3072:IA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAogo:IzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fb08c2c8d74ad6f3b7312353499e9370_JaffaCakes118

    • Size

      188KB

    • MD5

      fb08c2c8d74ad6f3b7312353499e9370

    • SHA1

      4d5ef824c0d86144c935417e43c65ba6824b73b7

    • SHA256

      626616d9a0808bd05e6c3bb6b236903852820adb7e5171826f2e71ec2afc11a5

    • SHA512

      5d43641b16df404d5b030a8d66d2af31b6def86043b6f5e425accd4582c5a5e83ae859fee61df02296ea4c711c8901a4cb308a1ca5ef4bbee155165fb2389ede

    • SSDEEP

      3072:IA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAogo:IzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks