Overview

overview

10

Static

static

3

0cc7af63e6...18.dll

windows7-x64

10

0cc7af63e6...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cc7af63e6b7bb5786a883cc88d84c0f_JaffaCakes118

  • Size

    296KB

  • Sample

    240501-zbhqgsac34

  • MD5

    0cc7af63e6b7bb5786a883cc88d84c0f

  • SHA1

    62081e06d03f6332db9d6fb69fc920c887d1fb45

  • SHA256

    de71238112f239dc2aadbad129db8beb45a64a5e3da042929a7b85480fdd11a1

  • SHA512

    f6add26b1ed9d6aebff04731153ae75cf408742dbf8a706f8b87b1ed6d8bc4f4bfdd8df83bc003548c7b6ebfafaa1cdf3233f9aeaf1e83fab4a11e66a71e98c5

  • SSDEEP

    6144:gX0++0XgkCbjM69qzmyEuoUvcEfjQ026I8ZCovc5tffn:0P6JqOnScOjQ/ICovcb3n

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

199.66.90.63:443

85.214.26.7:3389

51.68.224.245:4646

107.175.87.150:3889
rc4.plain
rc4.plain

Targets

    • Target

      0cc7af63e6b7bb5786a883cc88d84c0f_JaffaCakes118

    • Size

      296KB

    • MD5

      0cc7af63e6b7bb5786a883cc88d84c0f

    • SHA1

      62081e06d03f6332db9d6fb69fc920c887d1fb45

    • SHA256

      de71238112f239dc2aadbad129db8beb45a64a5e3da042929a7b85480fdd11a1

    • SHA512

      f6add26b1ed9d6aebff04731153ae75cf408742dbf8a706f8b87b1ed6d8bc4f4bfdd8df83bc003548c7b6ebfafaa1cdf3233f9aeaf1e83fab4a11e66a71e98c5

    • SSDEEP

      6144:gX0++0XgkCbjM69qzmyEuoUvcEfjQ026I8ZCovc5tffn:0P6JqOnScOjQ/ICovcb3n

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader 'dmod' strings

      Detects 'dmod' strings in Dridex loader.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks