Overview

overview

10

Static

static

bc5cd68f73...b2.dll

windows7_x64

10

bc5cd68f73...b2.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc5cd68f73dd7dfdd8baea4391ea27b2

  • Size

    177KB

  • Sample

    210610-hmcy54f7k2

  • MD5

    bc5cd68f73dd7dfdd8baea4391ea27b2

  • SHA1

    d288714dbe2c0029dc9fa6d74062e87f2768965d

  • SHA256

    76f52b3501f21a386da2fed4f96ef61cc0f2abd297ba4e68e677a12799a793cb

  • SHA512

    be07e9d6ff7bdf455f2ebcb69dd6cfd39ff2f913c9e774845e7c8e31d957911fe2df1117a20254fc25cb3581bf5c4304d46845fd28f4aa7331017e63dd5b04cc

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.91.89:9987

157.245.231.228:6051
rc4.plain
rc4.plain

Targets

    • Target

      bc5cd68f73dd7dfdd8baea4391ea27b2

    • Size

      177KB

    • MD5

      bc5cd68f73dd7dfdd8baea4391ea27b2

    • SHA1

      d288714dbe2c0029dc9fa6d74062e87f2768965d

    • SHA256

      76f52b3501f21a386da2fed4f96ef61cc0f2abd297ba4e68e677a12799a793cb

    • SHA512

      be07e9d6ff7bdf455f2ebcb69dd6cfd39ff2f913c9e774845e7c8e31d957911fe2df1117a20254fc25cb3581bf5c4304d46845fd28f4aa7331017e63dd5b04cc

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks