Overview

overview

10

Static

static

6

V701kINZ491h.dll

windows7_x64

10

V701kINZ491h.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    V701kINZ491h.dll

  • Size

    236KB

  • Sample

    210114-8b8nxlsmlx

  • MD5

    852c9134444062073128dc5a6effa7f7

  • SHA1

    c09150e35f0d71c59e41fff786cb40c3524e2134

  • SHA256

    24d6327c85aaba6e15d4815c3de9b5503ecd727da8105525afd859548190b3eb

  • SHA512

    9f0c85ff710943d8dfaa88b7d58b76530ca498782894a754a51a6738cb9dcbf4ac19b2e3f7ca029da93601dda06fe6dbea1eb1ee28aa8806f4506c0eda736a33

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      V701kINZ491h.dll

    • Size

      236KB

    • MD5

      852c9134444062073128dc5a6effa7f7

    • SHA1

      c09150e35f0d71c59e41fff786cb40c3524e2134

    • SHA256

      24d6327c85aaba6e15d4815c3de9b5503ecd727da8105525afd859548190b3eb

    • SHA512

      9f0c85ff710943d8dfaa88b7d58b76530ca498782894a754a51a6738cb9dcbf4ac19b2e3f7ca029da93601dda06fe6dbea1eb1ee28aa8806f4506c0eda736a33

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks