Overview

overview

10

Static

static

SecuriteIn...08.dll

windows7_x64

10

SecuriteIn...08.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Generic.mg.002c56165a0e7836.18308

  • Size

    836KB

  • Sample

    210121-nl6tjdt8j2

  • MD5

    002c56165a0e78369d0e1023ce044bf0

  • SHA1

    78ebfe4167a851bc75d9702aa1aea5efe1514b0c

  • SHA256

    a5ffce2a8d98ddc0ccc20744e88443eac323caf1cd8a218b8ccd50bc5ab8f1ac

  • SHA512

    bb6796d16c54e3521b4207323e7f774f9469d80b7aeb1d270b9f45034dd26ca801d9f8ed5130994ee0c7e35e084b33b7a90e6eef6295be4b53cf77a61c927d2a

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786
rc4.plain
rc4.plain

Targets

    • Target

      SecuriteInfo.com.Generic.mg.002c56165a0e7836.18308

    • Size

      836KB

    • MD5

      002c56165a0e78369d0e1023ce044bf0

    • SHA1

      78ebfe4167a851bc75d9702aa1aea5efe1514b0c

    • SHA256

      a5ffce2a8d98ddc0ccc20744e88443eac323caf1cd8a218b8ccd50bc5ab8f1ac

    • SHA512

      bb6796d16c54e3521b4207323e7f774f9469d80b7aeb1d270b9f45034dd26ca801d9f8ed5130994ee0c7e35e084b33b7a90e6eef6295be4b53cf77a61c927d2a

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks