Overview

overview

10

Static

static

SecuriteIn...50.dll

windows7_x64

10

SecuriteIn...50.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.W32.AIDetect.malware2.15668.10350

  • Size

    176KB

  • Sample

    210721-p4e7d6mxqe

  • MD5

    145c6b9290b6cf598f4995a8a70da916

  • SHA1

    11186a014fadd68d32a7cd76615c088c1adde213

  • SHA256

    770cb2aa5ea76f90e27bc72110b531fa3985ab4352d25362926971285408f148

  • SHA512

    849e06ac1b43183b6477c780eab57c15d8e533b14090e3b4c34bfbf26bbee2f54228f3bedab6b799b320acce72ac45bcf074ee8e04962c325d4ab385b7209087

Score
10/10
dridex22202botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22202

C2

178.238.236.59:443

104.245.52.73:5007

81.0.236.93:13786
rc4.plain
rc4.plain

Targets

    • Target

      SecuriteInfo.com.W32.AIDetect.malware2.15668.10350

    • Size

      176KB

    • MD5

      145c6b9290b6cf598f4995a8a70da916

    • SHA1

      11186a014fadd68d32a7cd76615c088c1adde213

    • SHA256

      770cb2aa5ea76f90e27bc72110b531fa3985ab4352d25362926971285408f148

    • SHA512

      849e06ac1b43183b6477c780eab57c15d8e533b14090e3b4c34bfbf26bbee2f54228f3bedab6b799b320acce72ac45bcf074ee8e04962c325d4ab385b7209087

    Score
    10/10
    dridex22202botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks