Overview

overview

10

Static

static

3

8ef60a2b20...18.exe

windows7-x64

10

8ef60a2b20...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8ef60a2b201cdb9cefb02f88a33fef1c_JaffaCakes118
  • Size 148KB
  • Sample240812-q3qqqstdpk
  • SHA256 b3b97a749987e585af7487da3a127d2a1619d92a430de1f5e5f7be401701aeb9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
dridexbotnetdiscovery

Malware Config

Extracted

Family

  • dridex

C2

  • 104.131.7.40:443

  • 128.199.247.176:1801

  • 69.45.19.145:3889

  • 95.211.148.20:1443

Targets

    • Target
      8ef60a2b201cdb9cefb02f88a33fef1c_JaffaCakes118
    • Size 148KB
    • SHA256 b3b97a749987e585af7487da3a127d2a1619d92a430de1f5e5f7be401701aeb9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    dridexbotnetdiscovery

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks