Overview

overview

10

Static

static

45d9d9c13a...03.dll

windows7_x64

10

45d9d9c13a...03.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45d9d9c13a4b2f77a5635a64cd58bd03

  • Size

    175KB

  • Sample

    210721-2f6pavapp2

  • MD5

    45d9d9c13a4b2f77a5635a64cd58bd03

  • SHA1

    be2b540f68f41a7a05e7d68c52712347f979b706

  • SHA256

    e26c7e7c111e41d766ab313e1c4c0f17cbc9710aee23248b017735caf97f2a0e

  • SHA512

    2f72bc059afaf29cfdbd207684486ea3c32ce7f640bc8b1002948a7bdf987b5c7dbd35b3dc917b54f853683d1b331e61c619c1c309e3bedd15308a4ebfa5f141

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.238.236.59:443

104.245.52.73:5007

81.0.236.93:13786
rc4.plain
rc4.plain

Targets

    • Target

      45d9d9c13a4b2f77a5635a64cd58bd03

    • Size

      175KB

    • MD5

      45d9d9c13a4b2f77a5635a64cd58bd03

    • SHA1

      be2b540f68f41a7a05e7d68c52712347f979b706

    • SHA256

      e26c7e7c111e41d766ab313e1c4c0f17cbc9710aee23248b017735caf97f2a0e

    • SHA512

      2f72bc059afaf29cfdbd207684486ea3c32ce7f640bc8b1002948a7bdf987b5c7dbd35b3dc917b54f853683d1b331e61c619c1c309e3bedd15308a4ebfa5f141

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks