Overview

overview

10

Static

static

3

fd42da3200...18.dll

windows7-x64

10

fd42da3200...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd42da32004b33e90e392cda8b323ad4_JaffaCakes118

  • Size

    188KB

  • Sample

    240420-v4zr9aeb61

  • MD5

    fd42da32004b33e90e392cda8b323ad4

  • SHA1

    5d4dbc23b3fa8809e5dc3375fda56d85efc8b600

  • SHA256

    68936383c35a144cf40d8562d8443c58bf0390f0653e875862ad0f62505e5ee1

  • SHA512

    8d1e0f3ba3202dc05e5d40650971582e1e2f98fb15576d11021c9a770bcb2a7b491a13843e9927d2b3192f665787b36d2b20b679b9efee4c21fb3b8e31b1c60a

  • SSDEEP

    3072:gA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoSo:gzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      fd42da32004b33e90e392cda8b323ad4_JaffaCakes118

    • Size

      188KB

    • MD5

      fd42da32004b33e90e392cda8b323ad4

    • SHA1

      5d4dbc23b3fa8809e5dc3375fda56d85efc8b600

    • SHA256

      68936383c35a144cf40d8562d8443c58bf0390f0653e875862ad0f62505e5ee1

    • SHA512

      8d1e0f3ba3202dc05e5d40650971582e1e2f98fb15576d11021c9a770bcb2a7b491a13843e9927d2b3192f665787b36d2b20b679b9efee4c21fb3b8e31b1c60a

    • SSDEEP

      3072:gA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoSo:gzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks