Overview

overview

10

Static

static

86a93f39f3...7d.dll

windows7_x64

10

86a93f39f3...7d.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86a93f39f3390d3c284b99e81e8b1a7d

  • Size

    176KB

  • Sample

    210721-njxm7t61ja

  • MD5

    86a93f39f3390d3c284b99e81e8b1a7d

  • SHA1

    7e534c2819b1ce06380afb1bd3a4ee6841fe5878

  • SHA256

    84c54cd76f3ac50f2f2e4afa57802d576bc5dd3c92cde50850feb04e02461ba3

  • SHA512

    54869aee77789544aff1ad81a6aacae75478b668a49a2e11a39157d2149eb161ed4b6b7805f8e47fec0b085fcfbe964f6e53e0a0d30af2eb105d4aeabae18104

Score
10/10
dridex22202botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

178.238.236.59:443

104.245.52.73:5007

81.0.236.93:13786
rc4.plain
rc4.plain

Targets

    • Target

      86a93f39f3390d3c284b99e81e8b1a7d

    • Size

      176KB

    • MD5

      86a93f39f3390d3c284b99e81e8b1a7d

    • SHA1

      7e534c2819b1ce06380afb1bd3a4ee6841fe5878

    • SHA256

      84c54cd76f3ac50f2f2e4afa57802d576bc5dd3c92cde50850feb04e02461ba3

    • SHA512

      54869aee77789544aff1ad81a6aacae75478b668a49a2e11a39157d2149eb161ed4b6b7805f8e47fec0b085fcfbe964f6e53e0a0d30af2eb105d4aeabae18104

    Score
    10/10
    dridex22202botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks