Overview

overview

10

Static

static

3

e0b3772277...18.dll

windows7-x64

10

e0b3772277...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0b3772277a5f801144dc445d23c6812_JaffaCakes118

  • Size

    320KB

  • Sample

    240914-wb6krsxbpf

  • MD5

    e0b3772277a5f801144dc445d23c6812

  • SHA1

    8767b5ce072be78a495b8d2260aaf73c0e47c0ea

  • SHA256

    8ae193225bd1a7192315a7003aa4aa9565c573b6078f48cc9e290c9b0798235e

  • SHA512

    d96fab303fd096397a1741158501fbe1e886698bc72210ff38d6b85443cbb1f4218fc8b71a4fee6f1ac10cbe47e83b19068b201cf6c2ca0e20f4a83cba9c2a7a

  • SSDEEP

    6144:lDM65wVpzY9WKgRP2Ba6k0UwLBlZtR7ynoOyzzR42eAgA:l4fY0P2BfxjhOQe67

Score
10/10
dridex10444botnetdiscovery

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

151.236.219.181:443

142.4.6.57:14043

162.144.127.197:3786

103.40.116.68:5443
rc4.plain
rc4.plain

Targets

    • Target

      e0b3772277a5f801144dc445d23c6812_JaffaCakes118

    • Size

      320KB

    • MD5

      e0b3772277a5f801144dc445d23c6812

    • SHA1

      8767b5ce072be78a495b8d2260aaf73c0e47c0ea

    • SHA256

      8ae193225bd1a7192315a7003aa4aa9565c573b6078f48cc9e290c9b0798235e

    • SHA512

      d96fab303fd096397a1741158501fbe1e886698bc72210ff38d6b85443cbb1f4218fc8b71a4fee6f1ac10cbe47e83b19068b201cf6c2ca0e20f4a83cba9c2a7a

    • SSDEEP

      6144:lDM65wVpzY9WKgRP2Ba6k0UwLBlZtR7ynoOyzzR42eAgA:l4fY0P2BfxjhOQe67

    Score
    10/10
    dridex10444botnetdiscovery

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks