Overview

overview

10

Static

static

SecuriteIn...50.dll

windows7_x64

10

SecuriteIn...50.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Generic.mg.5d97fe396c4e89bd.31350

  • Size

    848KB

  • Sample

    210121-s78tjexw1a

  • MD5

    5d97fe396c4e89bd1dc5fa0da3abbde9

  • SHA1

    9695dbe103f637768ad655268d2e762311b8166c

  • SHA256

    f9a4f05e5d78ace785001794ebc02cf9239ad95398de7b0915ae2366ea5abeca

  • SHA512

    10d87e0fff483144d0e91564b1b8484d08da9b5398d48ce76caeb69220335131b4369ef40eb30acbc19f5ea9077bd3b25c988be1b56f9f1a5d93dc628a2c1c57

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786
rc4.plain
rc4.plain

Targets

    • Target

      SecuriteInfo.com.Generic.mg.5d97fe396c4e89bd.31350

    • Size

      848KB

    • MD5

      5d97fe396c4e89bd1dc5fa0da3abbde9

    • SHA1

      9695dbe103f637768ad655268d2e762311b8166c

    • SHA256

      f9a4f05e5d78ace785001794ebc02cf9239ad95398de7b0915ae2366ea5abeca

    • SHA512

      10d87e0fff483144d0e91564b1b8484d08da9b5398d48ce76caeb69220335131b4369ef40eb30acbc19f5ea9077bd3b25c988be1b56f9f1a5d93dc628a2c1c57

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks