Overview

overview

10

Static

static

3

fca5ae0a39...18.dll

windows7-x64

10

fca5ae0a39...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fca5ae0a39cb0b564e48d153f19c5243_JaffaCakes118

  • Size

    188KB

  • Sample

    240420-neyqbsfc49

  • MD5

    fca5ae0a39cb0b564e48d153f19c5243

  • SHA1

    04de63fb5aa1980e5a7f202092323ebca1ab9bde

  • SHA256

    52617730dfcc46f99e337de3de8dec5f0c47819b21c91c39d32bd16f11f76b3f

  • SHA512

    c0bf524637a4388c07d96fc65902bea974daa8a75e341ccfccc0d87388c559a06efcc90a3ac8c53d7578151b155244170849391a3b7451a8740b27166d2c5a99

  • SSDEEP

    3072:oA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoIo:ozIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fca5ae0a39cb0b564e48d153f19c5243_JaffaCakes118

    • Size

      188KB

    • MD5

      fca5ae0a39cb0b564e48d153f19c5243

    • SHA1

      04de63fb5aa1980e5a7f202092323ebca1ab9bde

    • SHA256

      52617730dfcc46f99e337de3de8dec5f0c47819b21c91c39d32bd16f11f76b3f

    • SHA512

      c0bf524637a4388c07d96fc65902bea974daa8a75e341ccfccc0d87388c559a06efcc90a3ac8c53d7578151b155244170849391a3b7451a8740b27166d2c5a99

    • SSDEEP

      3072:oA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoIo:ozIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks