Overview

overview

10

Static

static

10

Internet-Win7-30min

windows7_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    257c07e77ac98b8f3d1f08c549887d6f75bd603b9adcb0a1e4e7dda9bd886161.dll

  • Size

    244KB

  • MD5

    04fd6daef19bb324ecabd0c1ea735fd6

  • SHA1

    527c68208aa3282d39121d949f9818c3db12986a

  • SHA256

    257c07e77ac98b8f3d1f08c549887d6f75bd603b9adcb0a1e4e7dda9bd886161

  • SHA512

    7980d1ecfbdc229a70e90aca2daa73ba1465c96d570471c4d1e6cfd74a9a34c9a05630c71a1f5e65d8004b1457d0cbe8c40155e05ba06252696da071d48bd9f9

Score
10/10
botnetloader10444dridex

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

209.20.87.138:443

198.1.115.153:8172

151.236.29.248:6516
rc4.plain
rc4.plain

Signatures

  • Dridex Loader 1 IoCs

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader
  • Dridex family
    dridex

Files

  • 257c07e77ac98b8f3d1f08c549887d6f75bd603b9adcb0a1e4e7dda9bd886161.dll
    .dll windows x86 regsvr32


    Exports