Overview

overview

10

Static

static

1afefe02f2...33.dll

windows7_x64

10

1afefe02f2...33.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1afefe02f254101df20e264551569c33.dll

  • Size

    164KB

  • Sample

    210120-gt4pplrx6s

  • MD5

    1afefe02f254101df20e264551569c33

  • SHA1

    9770f21ffbdf69c051c194b48737b12a07e8ae14

  • SHA256

    88813cbb3272347ca08a88e9ce1064bfdaf317d564c8c22c377f18a6e6fa2618

  • SHA512

    e858506559f5df4f991c29af58f8f62bd82fa9df86e132223c013198a8743b8c644dd5f08b9482f308b32c30e4492bed91ce9a9b03df33926a2a672486280329

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

172.86.186.22:3889

46.105.131.78:14431

103.244.206.74:33443

139.162.53.147:4443
rc4.plain
rc4.plain

Targets

    • Target

      1afefe02f254101df20e264551569c33.dll

    • Size

      164KB

    • MD5

      1afefe02f254101df20e264551569c33

    • SHA1

      9770f21ffbdf69c051c194b48737b12a07e8ae14

    • SHA256

      88813cbb3272347ca08a88e9ce1064bfdaf317d564c8c22c377f18a6e6fa2618

    • SHA512

      e858506559f5df4f991c29af58f8f62bd82fa9df86e132223c013198a8743b8c644dd5f08b9482f308b32c30e4492bed91ce9a9b03df33926a2a672486280329

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks