Overview

overview

10

Static

static

6

SlyOzj2S7kfU8q.dll

windows7_x64

10

SlyOzj2S7kfU8q.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SlyOzj2S7kfU8q.dll

  • Size

    236KB

  • Sample

    210114-cx84fewr2x

  • MD5

    99cf857dc9bf366da1cc363b0890f442

  • SHA1

    038be0efc724a12be21a96c8a8b8a60fb8079a70

  • SHA256

    e16fe86e0744baffec12cff0c66d3aed58b2c97c39578afee41572f503e20c4c

  • SHA512

    54fd7dd8aadf96f342a9945ef9b7e597fe7ccb58170243a2687484a0c7a1e7994a117c76609a51a98a57f20748ebe59d145c600555bc93d10004aada2ec6caf4

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      SlyOzj2S7kfU8q.dll

    • Size

      236KB

    • MD5

      99cf857dc9bf366da1cc363b0890f442

    • SHA1

      038be0efc724a12be21a96c8a8b8a60fb8079a70

    • SHA256

      e16fe86e0744baffec12cff0c66d3aed58b2c97c39578afee41572f503e20c4c

    • SHA512

      54fd7dd8aadf96f342a9945ef9b7e597fe7ccb58170243a2687484a0c7a1e7994a117c76609a51a98a57f20748ebe59d145c600555bc93d10004aada2ec6caf4

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks