Overview

overview

10

Static

static

3

8ba9311dd0...18.dll

windows7-x64

10

8ba9311dd0...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ba9311dd06f6f9e88110e4b18a8206c_JaffaCakes118

  • Size

    324KB

  • Sample

    240811-x569tstfqn

  • MD5

    8ba9311dd06f6f9e88110e4b18a8206c

  • SHA1

    b4ec3851352653b4a73536ce5b1f810427266cb4

  • SHA256

    982a3c6dda59afa109d2f596ad59ba1330d0c45aa7b6068e7c5c5e15d8fca878

  • SHA512

    281ae456ef257d789974aa07ec1f499fee5039dfc547663e415b1e67ef601e6f6ef3cf540a522508db18d6118830e1b7424473e16ee4b34b35bf99d832725a5c

  • SSDEEP

    6144:Oc5623NRws381V0GYCPTIZLZXWT0BqPohGNF/nWbyLOt:Oce1V0rC8ZLZXWT0YAGObaC

Score
10/10
dridex10444botnetdiscovery

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

51.75.24.85:443

46.22.116.163:3074

173.249.46.113:3889

192.241.174.45:4443
rc4.plain
rc4.plain

Targets

    • Target

      8ba9311dd06f6f9e88110e4b18a8206c_JaffaCakes118

    • Size

      324KB

    • MD5

      8ba9311dd06f6f9e88110e4b18a8206c

    • SHA1

      b4ec3851352653b4a73536ce5b1f810427266cb4

    • SHA256

      982a3c6dda59afa109d2f596ad59ba1330d0c45aa7b6068e7c5c5e15d8fca878

    • SHA512

      281ae456ef257d789974aa07ec1f499fee5039dfc547663e415b1e67ef601e6f6ef3cf540a522508db18d6118830e1b7424473e16ee4b34b35bf99d832725a5c

    • SSDEEP

      6144:Oc5623NRws381V0GYCPTIZLZXWT0BqPohGNF/nWbyLOt:Oce1V0rC8ZLZXWT0YAGObaC

    Score
    10/10
    dridex10444botnetdiscovery

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks