Overview

overview

10

Static

static

fjokw7.dll

windows7_x64

10

fjokw7.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fjokw7.rarajsviogq

  • Size

    538KB

  • Sample

    220522-f4dsfsfgc3

  • MD5

    8f83a5eaed1994d1a87fa16d77ad7833

  • SHA1

    0f3da89a227960d1a87065f02428857c32a39b89

  • SHA256

    67c1e48e17bc9e35b50e642ac99e475e1a6faee03ca671cea409bed644287580

  • SHA512

    25d0a2c0f3d2885ce3f21a26f7a8b9e1e75aec5cc69f42dc4f9314805e900dd5f0f9149cee750489bb6aeac06dfdf2b7dd15d6fbfeab08c25d183d64257188ad

Score
10/10
dridex10444botnet

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

77.220.64.146:443

85.25.134.43:8172

213.208.134.178:6516
rc4.plain
rc4.plain

Targets

    • Target

      fjokw7.rarajsviogq

    • Size

      538KB

    • MD5

      8f83a5eaed1994d1a87fa16d77ad7833

    • SHA1

      0f3da89a227960d1a87065f02428857c32a39b89

    • SHA256

      67c1e48e17bc9e35b50e642ac99e475e1a6faee03ca671cea409bed644287580

    • SHA512

      25d0a2c0f3d2885ce3f21a26f7a8b9e1e75aec5cc69f42dc4f9314805e900dd5f0f9149cee750489bb6aeac06dfdf2b7dd15d6fbfeab08c25d183d64257188ad

    Score
    10/10
    dridex10444botnet

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks