Overview

overview

10

Static

static

3

ffe794a169...18.dll

windows7-x64

10

ffe794a169...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffe794a1692afa2dd9a3f32d8ba65422_JaffaCakes118

  • Size

    173KB

  • Sample

    240421-w6q4kaha38

  • MD5

    ffe794a1692afa2dd9a3f32d8ba65422

  • SHA1

    3fa1f9a65b3ed9a99cfb5392c0d9619dca7644a1

  • SHA256

    5f95a17232dec1d4d7de87b52c4914414ec0d70f3618ec47abbe8ae92a2462ad

  • SHA512

    df975d22402a26eb94cf9dc9bdd4da5e79b85105de10f99b83a260cff645c010876876054cc5e314b2e41b4699f9260095758faf64dfd92d21324ab7d487649e

  • SSDEEP

    3072:qONLuxQI4JTJlYDFS6t2NAgEaakq7MCi6TM7EHNfFln:qO5PB3ot2ygEasni6TM7EHN

Score
10/10
dridex22202botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

45.79.33.48:443

139.162.202.74:5007

68.183.216.174:7443
rc4.plain
rc4.plain

Targets

    • Target

      ffe794a1692afa2dd9a3f32d8ba65422_JaffaCakes118

    • Size

      173KB

    • MD5

      ffe794a1692afa2dd9a3f32d8ba65422

    • SHA1

      3fa1f9a65b3ed9a99cfb5392c0d9619dca7644a1

    • SHA256

      5f95a17232dec1d4d7de87b52c4914414ec0d70f3618ec47abbe8ae92a2462ad

    • SHA512

      df975d22402a26eb94cf9dc9bdd4da5e79b85105de10f99b83a260cff645c010876876054cc5e314b2e41b4699f9260095758faf64dfd92d21324ab7d487649e

    • SSDEEP

      3072:qONLuxQI4JTJlYDFS6t2NAgEaakq7MCi6TM7EHNfFln:qO5PB3ot2ygEasni6TM7EHN

    Score
    10/10
    dridex22202botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks