Overview

overview

10

Static

static

6

GSB36ZV2sQVn.dll

windows7_x64

10

GSB36ZV2sQVn.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GSB36ZV2sQVn.dll

  • Size

    236KB

  • Sample

    210114-5z4ftxmw5j

  • MD5

    983c4f8c64cc3ffe72dfe6aefa921dee

  • SHA1

    8babeab5037f7e3e7db5934a62bbcec4cb8dfda2

  • SHA256

    d1bbb5dee037f3f892b843bb16de30a63ada202842f7c7445bb3f62a14d1dd40

  • SHA512

    68b89efac7dd4807f0bf0711d8aaee8a308e018f374a3863bbfd1e61b73db7f3f034d5192441c41c0388f4d052bce31bb155875075f1102e4ef8af7a598b70c2

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      GSB36ZV2sQVn.dll

    • Size

      236KB

    • MD5

      983c4f8c64cc3ffe72dfe6aefa921dee

    • SHA1

      8babeab5037f7e3e7db5934a62bbcec4cb8dfda2

    • SHA256

      d1bbb5dee037f3f892b843bb16de30a63ada202842f7c7445bb3f62a14d1dd40

    • SHA512

      68b89efac7dd4807f0bf0711d8aaee8a308e018f374a3863bbfd1e61b73db7f3f034d5192441c41c0388f4d052bce31bb155875075f1102e4ef8af7a598b70c2

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks