Overview

overview

10

Static

static

3

fc9ef5bc1b...18.dll

windows7-x64

10

fc9ef5bc1b...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc9ef5bc1b1cea4f33d5334473ee9ae4_JaffaCakes118

  • Size

    184KB

  • Sample

    240420-m7k49sfa64

  • MD5

    fc9ef5bc1b1cea4f33d5334473ee9ae4

  • SHA1

    ad637da69695b68f54b84fe521d3933d0828f22c

  • SHA256

    3c45d8d07263ab9cd4333e165b9a34d590a8f808f0df0a09f9440ad123861833

  • SHA512

    9a90bb5208d3b5eb70120b5aa46a206233316275c865154c18f1721468a8e6c53af1376b34b53843098e25fee2ddc791b0fd4545856ced279c106a5105dcd8b9

  • SSDEEP

    3072:Uhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JFVQcY:U3fOeIv54W6SFKfc9me9v9/JFV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      fc9ef5bc1b1cea4f33d5334473ee9ae4_JaffaCakes118

    • Size

      184KB

    • MD5

      fc9ef5bc1b1cea4f33d5334473ee9ae4

    • SHA1

      ad637da69695b68f54b84fe521d3933d0828f22c

    • SHA256

      3c45d8d07263ab9cd4333e165b9a34d590a8f808f0df0a09f9440ad123861833

    • SHA512

      9a90bb5208d3b5eb70120b5aa46a206233316275c865154c18f1721468a8e6c53af1376b34b53843098e25fee2ddc791b0fd4545856ced279c106a5105dcd8b9

    • SSDEEP

      3072:Uhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JFVQcY:U3fOeIv54W6SFKfc9me9v9/JFV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks