Overview

overview

10

Static

static

10

tmp/636af8...xe.dll

windows7_x64

1

tmp/636af8...xe.dll

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp/636af8df31c8919739cfe1dfc89b412a2a50b1d19e5becf2f5cd280f7db859ae.exe

  • Size

    117KB

  • MD5

    847efc3ae1f6445587d06579c2ac0b04

  • SHA1

    0788bcf1d47c45531d709282cd4bb362a227f4be

  • SHA256

    636af8df31c8919739cfe1dfc89b412a2a50b1d19e5becf2f5cd280f7db859ae

  • SHA512

    159fea62f5c8bd75737b21f1c05eb802c1c9294f06cf195778d60b4c6a10ec4e9a418b00c1f6ba71052e850b5baaf0783e837f35177e8f34076dc5fe0c3e8c6f

Score
10/10
botnetloader22206dridex

Malware Config

Extracted

Family

dridex

Botnet

22206

C2

120.50.40.185:443

139.59.14.223:8172

121.40.104.209:6602

139.162.113.169:593
rc4.plain
rc4.plain

Signatures

  • Dridex Loader 1 IoCs

    Detects Dridex both x86 and x64 loader in memory.

    botnetloader
  • Dridex family
    dridex

Files

  • tmp/636af8df31c8919739cfe1dfc89b412a2a50b1d19e5becf2f5cd280f7db859ae.exe
    .dll regsvr32 windows x86


    Exports