Overview

overview

10

Static

static

3

fc32b57b5f...18.dll

windows7-x64

10

fc32b57b5f...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc32b57b5f708d76aadb6cfeb05cd5eb_JaffaCakes118

  • Size

    184KB

  • Sample

    240420-hwk8nsbc37

  • MD5

    fc32b57b5f708d76aadb6cfeb05cd5eb

  • SHA1

    d8c93c164fb6afcdf01d990be7dd2e694b98cdf7

  • SHA256

    1930d3e97a5c9474f68d39a12b6382404f427fe7f93163838dbd45f0b03221a2

  • SHA512

    461b14abe48ab8f36fc5ce256b649812df17827503e9698a6859d4271128828bb90dfe424a085556e745a62661959aec1688be01034dad862245715c4eaa4e51

  • SSDEEP

    3072:Dhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JHVQcY:D3fOeIv54W6SFKfc9me9v9/JHV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      fc32b57b5f708d76aadb6cfeb05cd5eb_JaffaCakes118

    • Size

      184KB

    • MD5

      fc32b57b5f708d76aadb6cfeb05cd5eb

    • SHA1

      d8c93c164fb6afcdf01d990be7dd2e694b98cdf7

    • SHA256

      1930d3e97a5c9474f68d39a12b6382404f427fe7f93163838dbd45f0b03221a2

    • SHA512

      461b14abe48ab8f36fc5ce256b649812df17827503e9698a6859d4271128828bb90dfe424a085556e745a62661959aec1688be01034dad862245715c4eaa4e51

    • SSDEEP

      3072:Dhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JHVQcY:D3fOeIv54W6SFKfc9me9v9/JHV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks