Overview

overview

10

Static

static

6

huR9GcNBnM6.dll

windows7_x64

10

huR9GcNBnM6.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    huR9GcNBnM6.dll

  • Size

    236KB

  • Sample

    210114-dlms9fylvn

  • MD5

    4686d4460d8d12e4141b1184f0bf06ed

  • SHA1

    2bcc910f9cf182f467219256d7ffaa67564b27fa

  • SHA256

    5cefa4a9dbe76bca91942539bc1d6065ab671c4fb61ec98692f702ce44f29a63

  • SHA512

    3d722a1e1c48311dadd5465482c1a7d297ee61a7e6d64591b98edce1c0cbbdb00e8bff910041d359921cf0e884a36e7f4c5ebc2283f40ed821037a6adc11bb4b

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      huR9GcNBnM6.dll

    • Size

      236KB

    • MD5

      4686d4460d8d12e4141b1184f0bf06ed

    • SHA1

      2bcc910f9cf182f467219256d7ffaa67564b27fa

    • SHA256

      5cefa4a9dbe76bca91942539bc1d6065ab671c4fb61ec98692f702ce44f29a63

    • SHA512

      3d722a1e1c48311dadd5465482c1a7d297ee61a7e6d64591b98edce1c0cbbdb00e8bff910041d359921cf0e884a36e7f4c5ebc2283f40ed821037a6adc11bb4b

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks