Overview

overview

10

Static

static

3

afd767712f...18.exe

windows7-x64

10

afd767712f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afd767712fe119bf8c74145c3c4d149a_JaffaCakes118

  • Size

    204KB

  • Sample

    240615-xee3na1cpg

  • MD5

    afd767712fe119bf8c74145c3c4d149a

  • SHA1

    6e1b2b80db0a4c9a1ef648d7cf82a5a5c4da463a

  • SHA256

    ad3d29f8052c810479a31671f83df152ebc30cdf3755415f1d56ded6143d0f9d

  • SHA512

    53cc30cd54e46ce7a1e1692df89f478854eaf6f9b486ef72bdb0d6c440c0157fdcf207de9ef1ff5f4af7e53c59468f3b5cdf871e9cd2484290d419a950879773

  • SSDEEP

    1536:D5xYwjU1FRIcRW2oJkw4HU2nI+Ta+v7iawLRZFfHPe/h/5DH04NumpC9dQpF+k2i:DfVAOcNWDtPeDoCumpC7QpF+5yW27o2

Score
10/10
dridexbotnet

Malware Config

Extracted

Family

dridex

C2

5.196.15.119:443

46.105.131.72:443

157.7.163.144:3389

199.119.78.9:4143

Targets

    • Target

      afd767712fe119bf8c74145c3c4d149a_JaffaCakes118

    • Size

      204KB

    • MD5

      afd767712fe119bf8c74145c3c4d149a

    • SHA1

      6e1b2b80db0a4c9a1ef648d7cf82a5a5c4da463a

    • SHA256

      ad3d29f8052c810479a31671f83df152ebc30cdf3755415f1d56ded6143d0f9d

    • SHA512

      53cc30cd54e46ce7a1e1692df89f478854eaf6f9b486ef72bdb0d6c440c0157fdcf207de9ef1ff5f4af7e53c59468f3b5cdf871e9cd2484290d419a950879773

    • SSDEEP

      1536:D5xYwjU1FRIcRW2oJkw4HU2nI+Ta+v7iawLRZFfHPe/h/5DH04NumpC9dQpF+k2i:DfVAOcNWDtPeDoCumpC7QpF+5yW27o2

    Score
    10/10
    dridexbotnet

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks