Overview

overview

10

Static

static

3

fb1cf89144...18.dll

windows7-x64

10

fb1cf89144...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb1cf89144fdcaf91c0a6592e1236474_JaffaCakes118

  • Size

    188KB

  • Sample

    240419-zbvp2sfe9y

  • MD5

    fb1cf89144fdcaf91c0a6592e1236474

  • SHA1

    2696628025b5940ae8c843ec0b7d71350f873390

  • SHA256

    26da7f4b3630bb06457fce6100befedf5d2ffa75f544275ad8b3a94be5b769f5

  • SHA512

    f84d6fdd86a04215a3b3166cff8aff604cd35dad6678fd99c01ef70683e0f422e9d6171d0f580c44b77d752d13a905f52d7f20d23f0723890b630dad887a243a

  • SSDEEP

    3072:5H0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWd7dU:5Uua/Pv7YNhRIEZDeXVpAxtMsxK

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fb1cf89144fdcaf91c0a6592e1236474_JaffaCakes118

    • Size

      188KB

    • MD5

      fb1cf89144fdcaf91c0a6592e1236474

    • SHA1

      2696628025b5940ae8c843ec0b7d71350f873390

    • SHA256

      26da7f4b3630bb06457fce6100befedf5d2ffa75f544275ad8b3a94be5b769f5

    • SHA512

      f84d6fdd86a04215a3b3166cff8aff604cd35dad6678fd99c01ef70683e0f422e9d6171d0f580c44b77d752d13a905f52d7f20d23f0723890b630dad887a243a

    • SSDEEP

      3072:5H0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViWd7dU:5Uua/Pv7YNhRIEZDeXVpAxtMsxK

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks