Overview

overview

10

Static

static

64f6956aee...20.dll

windows7_x64

10

64f6956aee...20.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64f6956aeee3e7f1b9a3fd2f60aa3520.dll

  • Size

    164KB

  • Sample

    210119-prexqcw33s

  • MD5

    64f6956aeee3e7f1b9a3fd2f60aa3520

  • SHA1

    ef1dac8b3356ae85bbaddc4e267734ca0c9f6132

  • SHA256

    2cb94e38a1930e97de56e8a310155f8b98f4effa7ffd5e3553bec6f5f9539fb2

  • SHA512

    a36a861f3c62425d67a039396760ce7704337433cd1599abc6c372945b0bec140889a9412b4620d4216de063ee83703f301632075991945224265deaf4dd4ca7

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

172.86.186.22:3889

46.105.131.78:14431

103.244.206.74:33443

139.162.53.147:4443
rc4.plain
rc4.plain

Targets

    • Target

      64f6956aeee3e7f1b9a3fd2f60aa3520.dll

    • Size

      164KB

    • MD5

      64f6956aeee3e7f1b9a3fd2f60aa3520

    • SHA1

      ef1dac8b3356ae85bbaddc4e267734ca0c9f6132

    • SHA256

      2cb94e38a1930e97de56e8a310155f8b98f4effa7ffd5e3553bec6f5f9539fb2

    • SHA512

      a36a861f3c62425d67a039396760ce7704337433cd1599abc6c372945b0bec140889a9412b4620d4216de063ee83703f301632075991945224265deaf4dd4ca7

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks