Overview

overview

10

Static

static

0b1a2653ee...2a.dll

windows7_x64

10

0b1a2653ee...2a.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b1a2653ee163b6138a01b38b8f6d22a

  • Size

    175KB

  • Sample

    210721-gyl5qr6r82

  • MD5

    0b1a2653ee163b6138a01b38b8f6d22a

  • SHA1

    944b6ac504caed72bf2228b43830ac38ffec0221

  • SHA256

    a51b5bab04a5b0f549dd27851e83550a47cd38abd109ee24bc1d96aae089d25c

  • SHA512

    149437c7869ce7efca4b8eba893fc86a7b1393876f5f1e72483d0cc5447945389e3b96aeafdff5f13a73d35ebe4e7a76bec50de5c7e20c3348d3745a54a73732

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.238.236.59:443

104.245.52.73:5007

81.0.236.93:13786
rc4.plain
rc4.plain

Targets

    • Target

      0b1a2653ee163b6138a01b38b8f6d22a

    • Size

      175KB

    • MD5

      0b1a2653ee163b6138a01b38b8f6d22a

    • SHA1

      944b6ac504caed72bf2228b43830ac38ffec0221

    • SHA256

      a51b5bab04a5b0f549dd27851e83550a47cd38abd109ee24bc1d96aae089d25c

    • SHA512

      149437c7869ce7efca4b8eba893fc86a7b1393876f5f1e72483d0cc5447945389e3b96aeafdff5f13a73d35ebe4e7a76bec50de5c7e20c3348d3745a54a73732

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks