Overview

overview

10

Static

static

utkvjyvjc.dll

windows7_x64

10

utkvjyvjc.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    utkvjyvjc.dll

  • Size

    836KB

  • Sample

    210121-w818bym9v2

  • MD5

    b613ab3eef642e50999219c6bc103c24

  • SHA1

    d2df29f7acfc78b500217af07bc69b558e08d12e

  • SHA256

    4bfddde9f8b6c92a2436385cedf3f5acf3a3284a22f40390a503decad56eecf9

  • SHA512

    dc8b8909964b85799da724b38a1d6a8ec96b64b3a8bb359b1647af6b009a363a7343dda93c44af362d3476939a731fe7a333e07cb329d41e4e4095cb8d0b3527

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786
rc4.plain
rc4.plain

Targets

    • Target

      utkvjyvjc.dll

    • Size

      836KB

    • MD5

      b613ab3eef642e50999219c6bc103c24

    • SHA1

      d2df29f7acfc78b500217af07bc69b558e08d12e

    • SHA256

      4bfddde9f8b6c92a2436385cedf3f5acf3a3284a22f40390a503decad56eecf9

    • SHA512

      dc8b8909964b85799da724b38a1d6a8ec96b64b3a8bb359b1647af6b009a363a7343dda93c44af362d3476939a731fe7a333e07cb329d41e4e4095cb8d0b3527

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks