Overview

overview

10

Static

static

SecuriteIn...38.dll

windows7_x64

10

SecuriteIn...38.dll

windows10_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Drixed-FJX8BBAC1F6E645.3462.6238

  • Size

    180KB

  • Sample

    211021-3c5hesahe6

  • MD5

    8bbac1f6e64537bd91f903994912dc96

  • SHA1

    9099279d268d3b3ded00bcc5294b8df79b7a6abe

  • SHA256

    12627600a70bff6a42e8319f71a2221338ff54332afbf6ae28f130f2cfde630b

  • SHA512

    4684a015de4a1bc2852000624adbd3243db72d3d544636c1713a475a71bc407707a8a6509fa956b5dc5bd071ca7e09ee33f4cde48baf62ff5d0ecb2725fb4b8f

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

212.237.17.99:443

176.28.17.160:6602

51.254.140.238:8333
rc4.plain
rc4.plain

Targets

    • Target

      SecuriteInfo.com.Drixed-FJX8BBAC1F6E645.3462.6238

    • Size

      180KB

    • MD5

      8bbac1f6e64537bd91f903994912dc96

    • SHA1

      9099279d268d3b3ded00bcc5294b8df79b7a6abe

    • SHA256

      12627600a70bff6a42e8319f71a2221338ff54332afbf6ae28f130f2cfde630b

    • SHA512

      4684a015de4a1bc2852000624adbd3243db72d3d544636c1713a475a71bc407707a8a6509fa956b5dc5bd071ca7e09ee33f4cde48baf62ff5d0ecb2725fb4b8f

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks