Overview

overview

10

Static

static

3

fc52341900...18.exe

windows7-x64

10

fc52341900...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc5234190070e2831558a3d91d6cf1c2_JaffaCakes118

  • Size

    768KB

  • Sample

    240928-pwqayswemm

  • MD5

    fc5234190070e2831558a3d91d6cf1c2

  • SHA1

    188993c2ffd2bf3c835dc270d35b55d66d1ce245

  • SHA256

    ad92a24126e50c24f93482893e99b7d13cdfb48331fda5d2b818ccfa0b8fec17

  • SHA512

    1919f73ae052fcc4dd73e262ef99874aa1f149c59fbb5c1fec6c08d44107ae38bbed51424c834ead0ee4fefe92cd2f102055996a3645cecaca03c9cf62ad4bea

  • SSDEEP

    12288:LAJfG7BG7Ihl4RoyJqTf3gZYk0mec81X8U8tnx:Ln07IY6yJqb3g41L1MU8b

Score
10/10
dridex10111botnetdiscovery

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

185.89.158.19:443

144.217.7.207:4443

59.10.131.141:34443
rc4.plain
rc4.plain

Targets

    • Target

      fc5234190070e2831558a3d91d6cf1c2_JaffaCakes118

    • Size

      768KB

    • MD5

      fc5234190070e2831558a3d91d6cf1c2

    • SHA1

      188993c2ffd2bf3c835dc270d35b55d66d1ce245

    • SHA256

      ad92a24126e50c24f93482893e99b7d13cdfb48331fda5d2b818ccfa0b8fec17

    • SHA512

      1919f73ae052fcc4dd73e262ef99874aa1f149c59fbb5c1fec6c08d44107ae38bbed51424c834ead0ee4fefe92cd2f102055996a3645cecaca03c9cf62ad4bea

    • SSDEEP

      12288:LAJfG7BG7Ihl4RoyJqTf3gZYk0mec81X8U8tnx:Ln07IY6yJqb3g41L1MU8b

    Score
    10/10
    dridex10111botnetdiscovery

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks