Overview

overview

10

Static

static

3

fbe02e574b...18.dll

windows7-x64

10

fbe02e574b...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbe02e574bb7362f147d9df772428d3e_JaffaCakes118

  • Size

    188KB

  • Sample

    240420-ekdgxafh45

  • MD5

    fbe02e574bb7362f147d9df772428d3e

  • SHA1

    bfc1e69df33e8ea13d0e16d74e0230d41c909bcc

  • SHA256

    b74049b41d2561c6da4bddc629cbc98e1caf7c07ec0c12288dd467909755fff6

  • SHA512

    c1fd8f41e1ed53dea669b030f6f91b4456587c04a864b0deb319c4edc0696f05ecf76f7c47d2b02a34fa59299515a2d5697bf864801dbd52fdfaf47490ef35d9

  • SSDEEP

    3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAogo:/zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fbe02e574bb7362f147d9df772428d3e_JaffaCakes118

    • Size

      188KB

    • MD5

      fbe02e574bb7362f147d9df772428d3e

    • SHA1

      bfc1e69df33e8ea13d0e16d74e0230d41c909bcc

    • SHA256

      b74049b41d2561c6da4bddc629cbc98e1caf7c07ec0c12288dd467909755fff6

    • SHA512

      c1fd8f41e1ed53dea669b030f6f91b4456587c04a864b0deb319c4edc0696f05ecf76f7c47d2b02a34fa59299515a2d5697bf864801dbd52fdfaf47490ef35d9

    • SSDEEP

      3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAogo:/zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks