Overview

overview

10

Static

static

x205ymb2n.dll

windows7_x64

10

x205ymb2n.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x205ymb2n.dll

  • Size

    836KB

  • Sample

    210121-dv35ggry6s

  • MD5

    4746fbed409f87ec6ddb6653cb4e201c

  • SHA1

    b8ee3f60f74553e44d42b0f47a0a4a55ed644c97

  • SHA256

    864e95d36584e9db7bcd7552272e446a4c7cbc6601dcd4f4a2687d96374b439b

  • SHA512

    e6def1b637b3aea0d0f4ed27add38e9330e15cda1a38a1dd228799296497ddd0bf13f89022f0491fa98e735b5ccff0f621429a7606d6c3ecb0f57372157b405c

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786
rc4.plain
rc4.plain

Targets

    • Target

      x205ymb2n.dll

    • Size

      836KB

    • MD5

      4746fbed409f87ec6ddb6653cb4e201c

    • SHA1

      b8ee3f60f74553e44d42b0f47a0a4a55ed644c97

    • SHA256

      864e95d36584e9db7bcd7552272e446a4c7cbc6601dcd4f4a2687d96374b439b

    • SHA512

      e6def1b637b3aea0d0f4ed27add38e9330e15cda1a38a1dd228799296497ddd0bf13f89022f0491fa98e735b5ccff0f621429a7606d6c3ecb0f57372157b405c

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks