Overview

overview

10

Static

static

3

fcf45ed467...18.dll

windows7-x64

10

fcf45ed467...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcf45ed4670676dbdd455537fe9a643b_JaffaCakes118

  • Size

    188KB

  • Sample

    240420-rpl13aae42

  • MD5

    fcf45ed4670676dbdd455537fe9a643b

  • SHA1

    cf47540a4ed6e814cb49e5f80d7dc38ab39f0d38

  • SHA256

    bed2377ab4fd419c969de0566ed345436ef5bfcc97cc402f467785ed4e7be795

  • SHA512

    d592abc209f4ac76cd5880f2d6e79a8911ac9ba336567d35401e122ea49c44ab41e5998fd7b7e98c07428012d462e4e8ac7184dcd008a33c3ff073f0eb6323c7

  • SSDEEP

    3072:NA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoro:NzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fcf45ed4670676dbdd455537fe9a643b_JaffaCakes118

    • Size

      188KB

    • MD5

      fcf45ed4670676dbdd455537fe9a643b

    • SHA1

      cf47540a4ed6e814cb49e5f80d7dc38ab39f0d38

    • SHA256

      bed2377ab4fd419c969de0566ed345436ef5bfcc97cc402f467785ed4e7be795

    • SHA512

      d592abc209f4ac76cd5880f2d6e79a8911ac9ba336567d35401e122ea49c44ab41e5998fd7b7e98c07428012d462e4e8ac7184dcd008a33c3ff073f0eb6323c7

    • SSDEEP

      3072:NA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoro:NzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks