Overview

overview

10

Static

static

6

bca792b400...fb.dll

windows7_x64

10

bca792b400...fb.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bca792b4004c1b91548df22769b235fb.dll

  • Size

    236KB

  • Sample

    210121-v2nm7597m2

  • MD5

    bca792b4004c1b91548df22769b235fb

  • SHA1

    c5f3a8fe1860b0ea23bd4589a0d4ca10efe7da4b

  • SHA256

    e49a7c26f476a2556574d3b2194e4547be9657d62b37005d272d370039569394

  • SHA512

    a485e78c9426f95876316014cb04829567de6da25af5478c4420f40d6586cf35318acef39f43aa01df25f7c647cd014627ee23c1a397df02e3140377f5c2c0d2

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353
rc4.plain
rc4.plain

Targets

    • Target

      bca792b4004c1b91548df22769b235fb.dll

    • Size

      236KB

    • MD5

      bca792b4004c1b91548df22769b235fb

    • SHA1

      c5f3a8fe1860b0ea23bd4589a0d4ca10efe7da4b

    • SHA256

      e49a7c26f476a2556574d3b2194e4547be9657d62b37005d272d370039569394

    • SHA512

      a485e78c9426f95876316014cb04829567de6da25af5478c4420f40d6586cf35318acef39f43aa01df25f7c647cd014627ee23c1a397df02e3140377f5c2c0d2

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks