Overview

overview

10

Static

static

3

fb99aac35c...18.dll

windows7-x64

10

fb99aac35c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb99aac35cd54dcfc1b1d091a84afe47_JaffaCakes118

  • Size

    188KB

  • Sample

    240420-bntrhsce99

  • MD5

    fb99aac35cd54dcfc1b1d091a84afe47

  • SHA1

    cff1ea0c45edcdf2095efdfa3b1e64f9a239f370

  • SHA256

    2c96ca54fb4f300c3f717e25262b05912f7c689b88fb0f783e9e4c4d4c541e8c

  • SHA512

    02ecfae0c60656050e11f7533168e8dc8f172b3124ae181d4ac74832343348d55752d418733ff218fa69dee34d2cb3d5b8fddab4b72fa9129df58758c54066eb

  • SSDEEP

    3072:QA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:QzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fb99aac35cd54dcfc1b1d091a84afe47_JaffaCakes118

    • Size

      188KB

    • MD5

      fb99aac35cd54dcfc1b1d091a84afe47

    • SHA1

      cff1ea0c45edcdf2095efdfa3b1e64f9a239f370

    • SHA256

      2c96ca54fb4f300c3f717e25262b05912f7c689b88fb0f783e9e4c4d4c541e8c

    • SHA512

      02ecfae0c60656050e11f7533168e8dc8f172b3124ae181d4ac74832343348d55752d418733ff218fa69dee34d2cb3d5b8fddab4b72fa9129df58758c54066eb

    • SSDEEP

      3072:QA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:QzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks