Overview

overview

10

Static

static

6

huR9GcNBnM6.dll

windows7_x64

10

huR9GcNBnM6.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    huR9GcNBnM6.dll

  • Size

    236KB

  • Sample

    210114-nzjr1hnlv6

  • MD5

    09e6a4f78487634f1aaf4ffb5f1f9291

  • SHA1

    417d5c51bcdda9a2efc5e9336b00dc1f8e4d015a

  • SHA256

    fe0c930569fcd78494353879f7c5aceaec69cf7ea44f184d4e7f3c9d7573ad1e

  • SHA512

    64d1f45520ca83f22fc18990e43260acb8a6a6fb4d9f8816126866ee42e8a633e647b50fba309b24c89d6654e4dc199d48cb15ab2ba0d493cf8ffdec4ab5a27a

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      huR9GcNBnM6.dll

    • Size

      236KB

    • MD5

      09e6a4f78487634f1aaf4ffb5f1f9291

    • SHA1

      417d5c51bcdda9a2efc5e9336b00dc1f8e4d015a

    • SHA256

      fe0c930569fcd78494353879f7c5aceaec69cf7ea44f184d4e7f3c9d7573ad1e

    • SHA512

      64d1f45520ca83f22fc18990e43260acb8a6a6fb4d9f8816126866ee42e8a633e647b50fba309b24c89d6654e4dc199d48cb15ab2ba0d493cf8ffdec4ab5a27a

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks