Overview

overview

10

Static

static

3

88a67df65a...18.exe

windows7-x64

10

88a67df65a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88a67df65a4150117d6010dc1160f07c_JaffaCakes118

  • Size

    204KB

  • Sample

    240531-2xzbgagf7s

  • MD5

    88a67df65a4150117d6010dc1160f07c

  • SHA1

    178a5ec8894d9260d9d11b3ec0f9ad04327b290d

  • SHA256

    4b8270b92392f19713dc0e0397765d102b478fc8343699c3a6bcf0a339a07713

  • SHA512

    25d693eeb2fe665403cefdadd89c51d08271bb02db42641d4e3bcfeedb1b3cf64437c31083a332c877a11f435be0e097da0a09526fe24f62e69b7c574689fe77

  • SSDEEP

    1536:K5xYwjU1FRIcRW2oJkw4HU2nI+Ta+v7iawLRZFfHPe/h/5DH04Numpa9dQpF+k2i:KfVAOcNWDtPeDoCumpa7QpF+5yW27o2

Score
10/10
dridexbotnet

Malware Config

Extracted

Family

dridex

C2

5.196.15.119:443

46.105.131.72:443

157.7.163.144:3389

199.119.78.9:4143

Targets

    • Target

      88a67df65a4150117d6010dc1160f07c_JaffaCakes118

    • Size

      204KB

    • MD5

      88a67df65a4150117d6010dc1160f07c

    • SHA1

      178a5ec8894d9260d9d11b3ec0f9ad04327b290d

    • SHA256

      4b8270b92392f19713dc0e0397765d102b478fc8343699c3a6bcf0a339a07713

    • SHA512

      25d693eeb2fe665403cefdadd89c51d08271bb02db42641d4e3bcfeedb1b3cf64437c31083a332c877a11f435be0e097da0a09526fe24f62e69b7c574689fe77

    • SSDEEP

      1536:K5xYwjU1FRIcRW2oJkw4HU2nI+Ta+v7iawLRZFfHPe/h/5DH04Numpa9dQpF+k2i:KfVAOcNWDtPeDoCumpa7QpF+5yW27o2

    Score
    10/10
    dridexbotnet

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks