Overview

overview

10

Static

static

SecuriteIn...39.dll

windows7_x64

10

SecuriteIn...39.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Generic.mg.fbb5fe400b44ef9a.30739

  • Size

    836KB

  • Sample

    210121-asawanvwha

  • MD5

    fbb5fe400b44ef9a537fbd4f057acb55

  • SHA1

    7704694476b1106feb02969fa004d0e05b06b3f5

  • SHA256

    9307d30af9d01001c8f0fc5cbc51ebe29925c55110b5987b6bd0c9ce453834be

  • SHA512

    491aef5200184725406e36c5b8a353401d4b21c2f3f7c39c8b1d9043a66426a8b8f6c2e8f351577b16e014375aebcab45e900ce9d99ae74d1fade33a6705a9c6

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786
rc4.plain
rc4.plain

Targets

    • Target

      SecuriteInfo.com.Generic.mg.fbb5fe400b44ef9a.30739

    • Size

      836KB

    • MD5

      fbb5fe400b44ef9a537fbd4f057acb55

    • SHA1

      7704694476b1106feb02969fa004d0e05b06b3f5

    • SHA256

      9307d30af9d01001c8f0fc5cbc51ebe29925c55110b5987b6bd0c9ce453834be

    • SHA512

      491aef5200184725406e36c5b8a353401d4b21c2f3f7c39c8b1d9043a66426a8b8f6c2e8f351577b16e014375aebcab45e900ce9d99ae74d1fade33a6705a9c6

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks