Overview

overview

10

Static

static

3

ff20f66b59...18.dll

windows7-x64

10

ff20f66b59...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff20f66b5981b6164994970085ee4862_JaffaCakes118

  • Size

    188KB

  • Sample

    240421-m34e2shg3v

  • MD5

    ff20f66b5981b6164994970085ee4862

  • SHA1

    e5f4e9fd61e6688c2c631edafdedda27d7660071

  • SHA256

    2feb229fb38b3e561bb540ad65e4352b31091bc053c068faee55c46623e33f57

  • SHA512

    7e5df674b9df6d1089f7694b07b6b0b58f4b7c021e8ba18fc167a940b9617e5a1479204c2686295969ce9350476481f14652cb4242596cf908d6b4f3e28da4c9

  • SSDEEP

    3072:XA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:XzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      ff20f66b5981b6164994970085ee4862_JaffaCakes118

    • Size

      188KB

    • MD5

      ff20f66b5981b6164994970085ee4862

    • SHA1

      e5f4e9fd61e6688c2c631edafdedda27d7660071

    • SHA256

      2feb229fb38b3e561bb540ad65e4352b31091bc053c068faee55c46623e33f57

    • SHA512

      7e5df674b9df6d1089f7694b07b6b0b58f4b7c021e8ba18fc167a940b9617e5a1479204c2686295969ce9350476481f14652cb4242596cf908d6b4f3e28da4c9

    • SSDEEP

      3072:XA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:XzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks