Overview

overview

10

Static

static

3

a7d9a78e7d...18.dll

windows7-x64

10

a7d9a78e7d...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7d9a78e7d3a8332315dca1300c398fb_JaffaCakes118

  • Size

    324KB

  • Sample

    240818-xq1thaygma

  • MD5

    a7d9a78e7d3a8332315dca1300c398fb

  • SHA1

    8ffea97320c626ebb9589aa929815ebcf306111b

  • SHA256

    25d838419ca42f920a05afe582e328ca7bc5d498ae642b20f114b4415077d7f9

  • SHA512

    81e4b362c9dd419d0ab0423c67b7628c10c1399326b3b6f670ca14972bd179d58efa9017db681fa8b02f35f21425584e7c9ca72efb2b796aeedec93e4ed91902

  • SSDEEP

    6144:VudqKJ4hF7popQTRq3va4jl6u31Ut+Ji370HnBs4NeuVCC:h7yUReva4jlNoQnBXek1

Score
10/10
dridex10444botnetdiscovery

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

51.75.24.85:443

46.22.116.163:3074

173.249.46.113:3889

192.241.174.45:4443
rc4.plain
rc4.plain

Targets

    • Target

      a7d9a78e7d3a8332315dca1300c398fb_JaffaCakes118

    • Size

      324KB

    • MD5

      a7d9a78e7d3a8332315dca1300c398fb

    • SHA1

      8ffea97320c626ebb9589aa929815ebcf306111b

    • SHA256

      25d838419ca42f920a05afe582e328ca7bc5d498ae642b20f114b4415077d7f9

    • SHA512

      81e4b362c9dd419d0ab0423c67b7628c10c1399326b3b6f670ca14972bd179d58efa9017db681fa8b02f35f21425584e7c9ca72efb2b796aeedec93e4ed91902

    • SSDEEP

      6144:VudqKJ4hF7popQTRq3va4jl6u31Ut+Ji370HnBs4NeuVCC:h7yUReva4jlNoQnBXek1

    Score
    10/10
    dridex10444botnetdiscovery

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks