Overview

overview

10

Static

static

6

CcV1lWG3FwB1i.dll

windows7_x64

10

CcV1lWG3FwB1i.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CcV1lWG3FwB1i.dll

  • Size

    236KB

  • Sample

    210114-ln4celwyjj

  • MD5

    db8140868a29ebadb2f8c2ec0788d527

  • SHA1

    9b65dc2085d4140fef6b18d3e7082c945b7639fc

  • SHA256

    6a71e4bde9172e3bb990c103d5a2ff9096b35ea855dac2a227d261e203a2c883

  • SHA512

    54773149d6aadefec73c12d91a87a548c59e542a04b2ae85ca678377e02283f1186b00650a326e17507b8d179497ef0e554c5d71db6e6dfc91b91b3805267546

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      CcV1lWG3FwB1i.dll

    • Size

      236KB

    • MD5

      db8140868a29ebadb2f8c2ec0788d527

    • SHA1

      9b65dc2085d4140fef6b18d3e7082c945b7639fc

    • SHA256

      6a71e4bde9172e3bb990c103d5a2ff9096b35ea855dac2a227d261e203a2c883

    • SHA512

      54773149d6aadefec73c12d91a87a548c59e542a04b2ae85ca678377e02283f1186b00650a326e17507b8d179497ef0e554c5d71db6e6dfc91b91b3805267546

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks