Overview

overview

10

Static

static

3

8ef60a2b20...18.exe

windows7-x64

10

8ef60a2b20...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ef60a2b201cdb9cefb02f88a33fef1c_JaffaCakes118

  • Size

    148KB

  • Sample

    240812-q3qqqstdpk

  • MD5

    8ef60a2b201cdb9cefb02f88a33fef1c

  • SHA1

    7a95042f651001081d4c48c41300ef5022a1e2ef

  • SHA256

    b3b97a749987e585af7487da3a127d2a1619d92a430de1f5e5f7be401701aeb9

  • SHA512

    9b016d8f0895a58c7bfd3ac9a66640f3174c419a55d9257c9c55ed84a1d94214bba50dc6aca00fe91c94e21d6b14cddec131415a782d7117fb93a1dcaa3336cc

  • SSDEEP

    3072:VB4WIuesp4imR3fGdBIPrHgVxIsC+l2faawDijPitG:VBeIqqBIPDYxII2dw0Pi

Score
10/10
dridexbotnetdiscovery

Malware Config

Extracted

Family

dridex

C2

104.131.7.40:443

128.199.247.176:1801

69.45.19.145:3889

95.211.148.20:1443

Targets

    • Target

      8ef60a2b201cdb9cefb02f88a33fef1c_JaffaCakes118

    • Size

      148KB

    • MD5

      8ef60a2b201cdb9cefb02f88a33fef1c

    • SHA1

      7a95042f651001081d4c48c41300ef5022a1e2ef

    • SHA256

      b3b97a749987e585af7487da3a127d2a1619d92a430de1f5e5f7be401701aeb9

    • SHA512

      9b016d8f0895a58c7bfd3ac9a66640f3174c419a55d9257c9c55ed84a1d94214bba50dc6aca00fe91c94e21d6b14cddec131415a782d7117fb93a1dcaa3336cc

    • SSDEEP

      3072:VB4WIuesp4imR3fGdBIPrHgVxIsC+l2faawDijPitG:VBeIqqBIPDYxII2dw0Pi

    Score
    10/10
    dridexbotnetdiscovery

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks