Overview

overview

10

Static

static

1b870dab19...in.dll

windows7_x64

10

1b870dab19...in.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b870dab19a3650ab790037ae327b7cb.bin

  • Size

    371KB

  • Sample

    210130-1djl378nrs

  • MD5

    1b870dab19a3650ab790037ae327b7cb

  • SHA1

    3fd3d813417c0872d1a1374439351dd53500a024

  • SHA256

    642ab82c74a436b00f64a17174e23f40a64b721b6128e80a70e3cbffc7d3424a

  • SHA512

    707779597690d2178622be05956a2bf49456dd63f70cfba6e03971fdcb4179e754d3a1a725dd08768c8bd91333e1e3d113e791b726ed198b2c7b6175bd4f5087

Score
10/10
dridex10555botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10555

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786
rc4.plain
rc4.plain

Targets

    • Target

      1b870dab19a3650ab790037ae327b7cb.bin

    • Size

      371KB

    • MD5

      1b870dab19a3650ab790037ae327b7cb

    • SHA1

      3fd3d813417c0872d1a1374439351dd53500a024

    • SHA256

      642ab82c74a436b00f64a17174e23f40a64b721b6128e80a70e3cbffc7d3424a

    • SHA512

      707779597690d2178622be05956a2bf49456dd63f70cfba6e03971fdcb4179e754d3a1a725dd08768c8bd91333e1e3d113e791b726ed198b2c7b6175bd4f5087

    Score
    10/10
    dridex10555botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks