Overview

overview

10

Static

static

gy2fyh8.dll

windows7_x64

10

gy2fyh8.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    gy2fyh8.rar
  • Size 425KB
  • Sample220416-gc34psfcf9
  • SHA256 e63419700590e021c61e68cfaccfbe5be4f31aba7fdf703d323c8b14365658e5
  • MD5 SHA1 SHA512
Score
10/10
dridex10555botnet

Malware Config

Extracted

Family

  • dridex

Botnet

  • 10555

C2

  • 77.220.64.132:443

  • 212.227.53.240:5037

  • 192.241.174.45:8172

rc4.plain
rc4.plain

Targets

    • Target
      gy2fyh8.rar
    • Size 425KB
    • SHA256 e63419700590e021c61e68cfaccfbe5be4f31aba7fdf703d323c8b14365658e5
    • MD5 SHA1 SHA512
    Score
    10/10
    dridex10555botnet

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks