Overview

overview

10

Static

static

5_ep0icd1.dll

windows7_x64

10

5_ep0icd1.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5_ep0icd1.dll

  • Size

    244KB

  • Sample

    211020-p5g1yahaf9

  • MD5

    63e019916e893981e2d506d16d5b0a8a

  • SHA1

    1b1f2e2e5aa6563ad1213c2c2ccc91a0dda11e04

  • SHA256

    6ca85dc9eaa24e9606b226ec6b117b8ffbd90112a07f4ac8536d837c4f1bb7aa

  • SHA512

    09314c72434967ce35c7a35467663deed9aa8d74eb3d2d7e6840436f23873e45f36012975e19e699e4f3a2ae7adf0cc5da9510be896c5dee25005b522af6f9d8

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

195.154.146.84:443

45.56.121.87:8116

157.245.222.44:5723
rc4.plain
rc4.plain

Targets

    • Target

      5_ep0icd1.dll

    • Size

      244KB

    • MD5

      63e019916e893981e2d506d16d5b0a8a

    • SHA1

      1b1f2e2e5aa6563ad1213c2c2ccc91a0dda11e04

    • SHA256

      6ca85dc9eaa24e9606b226ec6b117b8ffbd90112a07f4ac8536d837c4f1bb7aa

    • SHA512

      09314c72434967ce35c7a35467663deed9aa8d74eb3d2d7e6840436f23873e45f36012975e19e699e4f3a2ae7adf0cc5da9510be896c5dee25005b522af6f9d8

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks