Overview

overview

10

Static

static

6

6caba7e0be...96.dll

windows7_x64

10

6caba7e0be...96.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6caba7e0bee7373c2c620f1e12b85896.dll

  • Size

    236KB

  • Sample

    210120-vx1herm8mn

  • MD5

    6caba7e0bee7373c2c620f1e12b85896

  • SHA1

    b6a881f9f02ed06a24fd3e32b77a9ac84d08131c

  • SHA256

    c8a21f3ba32b9e1557b9146648a3ce2dc39a53e6fc07d58b736b385d9b0b777a

  • SHA512

    e9463b48754c92264dc2b24c89ee63da4d853118e646883c7f9906ca2e2485654b419822bc4912becc9d60557c9cef1d79767b503aec15edc7d7f3696da865c1

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      6caba7e0bee7373c2c620f1e12b85896.dll

    • Size

      236KB

    • MD5

      6caba7e0bee7373c2c620f1e12b85896

    • SHA1

      b6a881f9f02ed06a24fd3e32b77a9ac84d08131c

    • SHA256

      c8a21f3ba32b9e1557b9146648a3ce2dc39a53e6fc07d58b736b385d9b0b777a

    • SHA512

      e9463b48754c92264dc2b24c89ee63da4d853118e646883c7f9906ca2e2485654b419822bc4912becc9d60557c9cef1d79767b503aec15edc7d7f3696da865c1

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks