Overview

overview

10

Static

static

3

ffd56dfeb3...18.dll

windows7-x64

10

ffd56dfeb3...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffd56dfeb31da4cd2395202c9b69d789_JaffaCakes118

  • Size

    188KB

  • Sample

    240421-wgf73agf9t

  • MD5

    ffd56dfeb31da4cd2395202c9b69d789

  • SHA1

    f43b4380c327786b0a2f38bfff62bd414bde262d

  • SHA256

    dc7c1568064137d9dc0d01d17e3f4155a8aa8b02cb154bc7c8c7f2197b61743f

  • SHA512

    04f31008a7105ada5f7697f38b4c90c7a530a9db01d006e7c361e9f8c80d67ad64a7e6dcf88a670ed6a3f2aa566ed693976e98822aa479d788a8aa3376df0127

  • SSDEEP

    3072:gA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAolo:gzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      ffd56dfeb31da4cd2395202c9b69d789_JaffaCakes118

    • Size

      188KB

    • MD5

      ffd56dfeb31da4cd2395202c9b69d789

    • SHA1

      f43b4380c327786b0a2f38bfff62bd414bde262d

    • SHA256

      dc7c1568064137d9dc0d01d17e3f4155a8aa8b02cb154bc7c8c7f2197b61743f

    • SHA512

      04f31008a7105ada5f7697f38b4c90c7a530a9db01d006e7c361e9f8c80d67ad64a7e6dcf88a670ed6a3f2aa566ed693976e98822aa479d788a8aa3376df0127

    • SSDEEP

      3072:gA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAolo:gzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks