Overview

overview

10

Static

static

3

0704068b7b...18.dll

windows7-x64

10

0704068b7b...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0704068b7be5426f38f2da38c965d04e_JaffaCakes118

  • Size

    280KB

  • Sample

    240429-g6waysce63

  • MD5

    0704068b7be5426f38f2da38c965d04e

  • SHA1

    80ef0434d370a4b112cb632b1868aad93d53a9bd

  • SHA256

    8c8896ec10234612dd5063dfa4f84ca815ace19c4c2b0b3def9c29be0029f390

  • SHA512

    042f7eb2107965149f7cd249de9adcda4a5367d5a789fa4cc71450332f80c7c1d861653646c57faeebe173ca2371530585f0dd36b9164f46132f0652eaa98808

  • SSDEEP

    6144:SqUtrd+yrmjlZI3vIVMPN6SG2H9X0A6NPXiGmJ5WMm:Sz+yoZIwVMPN6SG2x0dNfiGuI

Score
10/10
dridex10555botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10555

C2

146.164.126.197:443

69.16.193.166:9443

193.90.12.122:3098

157.245.103.132:14043
rc4.plain
rc4.plain

Targets

    • Target

      0704068b7be5426f38f2da38c965d04e_JaffaCakes118

    • Size

      280KB

    • MD5

      0704068b7be5426f38f2da38c965d04e

    • SHA1

      80ef0434d370a4b112cb632b1868aad93d53a9bd

    • SHA256

      8c8896ec10234612dd5063dfa4f84ca815ace19c4c2b0b3def9c29be0029f390

    • SHA512

      042f7eb2107965149f7cd249de9adcda4a5367d5a789fa4cc71450332f80c7c1d861653646c57faeebe173ca2371530585f0dd36b9164f46132f0652eaa98808

    • SSDEEP

      6144:SqUtrd+yrmjlZI3vIVMPN6SG2H9X0A6NPXiGmJ5WMm:Sz+yoZIwVMPN6SG2x0dNfiGuI

    Score
    10/10
    dridex10555botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader 'dmod' strings

      Detects 'dmod' strings in Dridex loader.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks