Overview

overview

10

Static

static

5.exe.dll

windows7_x64

10

5.exe.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5.exe

  • Size

    552KB

  • Sample

    211223-szm7jsaba6

  • MD5

    bb880b1799d137def2d94a7eda6d36a1

  • SHA1

    63f3b460bcf945995a028326ffd28be470ab21e0

  • SHA256

    6b62c3906edaed2be8993b6013a50ab123cd85d5cd55d4580d324b2b5c3264e9

  • SHA512

    eaedf5ec87afb73372280c29fe1ee58842f8400fab85ab335cf0c68750bdd022297e9cf02ae9c6e77cb1135cb76c229049c34d831dcc681decb66fc01771a707

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      5.exe

    • Size

      552KB

    • MD5

      bb880b1799d137def2d94a7eda6d36a1

    • SHA1

      63f3b460bcf945995a028326ffd28be470ab21e0

    • SHA256

      6b62c3906edaed2be8993b6013a50ab123cd85d5cd55d4580d324b2b5c3264e9

    • SHA512

      eaedf5ec87afb73372280c29fe1ee58842f8400fab85ab335cf0c68750bdd022297e9cf02ae9c6e77cb1135cb76c229049c34d831dcc681decb66fc01771a707

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks