Overview

overview

10

Static

static

3

ff886cca90...18.dll

windows7-x64

10

ff886cca90...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff886cca901145d978d46b57746727ee_JaffaCakes118

  • Size

    188KB

  • Sample

    240421-r9bqtsdf53

  • MD5

    ff886cca901145d978d46b57746727ee

  • SHA1

    93502f4d5f1737d45223d01cbc8cef322cf6f8ad

  • SHA256

    442654479386e1709e557f4387c9069e3cf8fd9994b754b2ce4676964803177f

  • SHA512

    fb86ccc18a3fd2f33151a0b132ea8e3b300fcee507a97a8d8c1aca170d2dd89a9f9bd6293ce9cd644d0559f1d1169b24ceb07ce7c847021af49ca598a92fc6b7

  • SSDEEP

    3072:aA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoNo:azIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      ff886cca901145d978d46b57746727ee_JaffaCakes118

    • Size

      188KB

    • MD5

      ff886cca901145d978d46b57746727ee

    • SHA1

      93502f4d5f1737d45223d01cbc8cef322cf6f8ad

    • SHA256

      442654479386e1709e557f4387c9069e3cf8fd9994b754b2ce4676964803177f

    • SHA512

      fb86ccc18a3fd2f33151a0b132ea8e3b300fcee507a97a8d8c1aca170d2dd89a9f9bd6293ce9cd644d0559f1d1169b24ceb07ce7c847021af49ca598a92fc6b7

    • SSDEEP

      3072:aA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoNo:azIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks