Overview

overview

10

Static

static

6

MRbjhZoUav.dll

windows7_x64

10

MRbjhZoUav.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MRbjhZoUav.dll

  • Size

    236KB

  • Sample

    210114-17tk3hhcrs

  • MD5

    a338eb08cef5ac9d6eaab808fda95463

  • SHA1

    879b098615a9cb585ec396a42b17381ce9e9c352

  • SHA256

    ef4eaf2bdc7ca32b9bc5c11c4855e07c4b35ba6f94d5307cfb61aa4ff3c63859

  • SHA512

    acdfe7594e69c712b454ead3f673fb7dfb6685552ae3f33d2d56192a9a7a47280cde2d5799fa183b33d25f25919902fa22a1b54656a5476a95087adca4340a4b

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      MRbjhZoUav.dll

    • Size

      236KB

    • MD5

      a338eb08cef5ac9d6eaab808fda95463

    • SHA1

      879b098615a9cb585ec396a42b17381ce9e9c352

    • SHA256

      ef4eaf2bdc7ca32b9bc5c11c4855e07c4b35ba6f94d5307cfb61aa4ff3c63859

    • SHA512

      acdfe7594e69c712b454ead3f673fb7dfb6685552ae3f33d2d56192a9a7a47280cde2d5799fa183b33d25f25919902fa22a1b54656a5476a95087adca4340a4b

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks