Overview

overview

10

Static

static

412b57c9e8...54.exe

windows7_x64

10

412b57c9e8...54.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    412b57c9e83bf404bfacf087f3bf8edee7af584ab303f3222eb22ced5d7e5f54

  • Size

    450KB

  • Sample

    220502-ah38bsfcb9

  • MD5

    4ec71b3e86b5f61b54d6516d90cc0f41

  • SHA1

    fef8c687dc109dfb662ada733bca5b0bb518ab6e

  • SHA256

    412b57c9e83bf404bfacf087f3bf8edee7af584ab303f3222eb22ced5d7e5f54

  • SHA512

    d68d32c9fc234dded9b5a172e5e024aeac6c48297704db51ba1623a3f18d01c8aa6776f3309055bf9bb13727c74669ef9a097e9216a32bbc6760dd80f78dfff1

Score
10/10
dridex10111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

5.9.178.143:443

185.230.161.62:3389

2.58.16.89:8443
rc4.plain
rc4.plain

Targets

    • Target

      412b57c9e83bf404bfacf087f3bf8edee7af584ab303f3222eb22ced5d7e5f54

    • Size

      450KB

    • MD5

      4ec71b3e86b5f61b54d6516d90cc0f41

    • SHA1

      fef8c687dc109dfb662ada733bca5b0bb518ab6e

    • SHA256

      412b57c9e83bf404bfacf087f3bf8edee7af584ab303f3222eb22ced5d7e5f54

    • SHA512

      d68d32c9fc234dded9b5a172e5e024aeac6c48297704db51ba1623a3f18d01c8aa6776f3309055bf9bb13727c74669ef9a097e9216a32bbc6760dd80f78dfff1

    Score
    10/10
    dridex10111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader 'dmod' strings

      Detects 'dmod' strings in Dridex loader.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks