Overview

overview

10

Static

static

94b5a8d789...1d.dll

windows7_x64

10

94b5a8d789...1d.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94b5a8d78982670fe04dfb37a9cdb81d

  • Size

    176KB

  • Sample

    210721-7p9fz39g5j

  • MD5

    94b5a8d78982670fe04dfb37a9cdb81d

  • SHA1

    62135e3f8d0cf8e09522c2f740920032767bf8fa

  • SHA256

    b09882743ed13b041f6b2693943533e4be1e9a5d7e17b701d978d3f4178b76a8

  • SHA512

    12a73c4559cb20196a87287fe45bb9247e8d156f0ba1e814d28e01907e625119260e8850e2dc0658025b29d9c66d4c3c680a8d041ce24a8e9d77b274959b2327

Score
10/10
dridex22202botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

178.238.236.59:443

104.245.52.73:5007

81.0.236.93:13786
rc4.plain
rc4.plain

Targets

    • Target

      94b5a8d78982670fe04dfb37a9cdb81d

    • Size

      176KB

    • MD5

      94b5a8d78982670fe04dfb37a9cdb81d

    • SHA1

      62135e3f8d0cf8e09522c2f740920032767bf8fa

    • SHA256

      b09882743ed13b041f6b2693943533e4be1e9a5d7e17b701d978d3f4178b76a8

    • SHA512

      12a73c4559cb20196a87287fe45bb9247e8d156f0ba1e814d28e01907e625119260e8850e2dc0658025b29d9c66d4c3c680a8d041ce24a8e9d77b274959b2327

    Score
    10/10
    dridex22202botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks