Overview

overview

10

Static

static

10

tmp/2a2098...xe.dll

windows7_x64

3

tmp/2a2098...xe.dll

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp/2a2098b68112d69efbb077ed49089b0ac590b2c05e7044d2858c49fe76b3124d.exe

  • Size

    117KB

  • MD5

    8d6f3783b3d804d3b5ed5494b74252de

  • SHA1

    dc751f22bed09a1efa799ae54075131906ba3e67

  • SHA256

    2a2098b68112d69efbb077ed49089b0ac590b2c05e7044d2858c49fe76b3124d

  • SHA512

    e35c9113e455cc8330c55798ba989f23e193099c5552ff544bc0df36006ba9259c884408b9831c41327054a4cdb1f54bcc9459d6a9642c81b65cb677d06fde17

Score
10/10
botnetloader22201dridex

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Signatures

  • Dridex Loader 1 IoCs

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader
  • Dridex family
    dridex

Files

  • tmp/2a2098b68112d69efbb077ed49089b0ac590b2c05e7044d2858c49fe76b3124d.exe
    .dll windows x86


    Exports