Overview

overview

10

Static

static

ijlog1gmo.dll

windows7_x64

10

ijlog1gmo.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ijlog1gmo.zip

  • Size

    476KB

  • Sample

    220611-t6jndaceb2

  • MD5

    adcf8e3ae302ab46c26836a4d0ee2768

  • SHA1

    e467099b5fd82d7989e33169f3a1979776fc28a3

  • SHA256

    715b1639199a7bac9ccecc2d174c5e794b5edb6ffec3b72af7b904f0683d9f49

  • SHA512

    4e0f7d31cad387cdee5b73c36e0e11a64676d2b04cdedc26e375398780f1af99c7ec55616570d1fefc0016b685c96558e8d85c2aa6b9453fd41148a47e79258d

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664
rc4.plain
rc4.plain

Targets

    • Target

      ijlog1gmo.zip

    • Size

      476KB

    • MD5

      adcf8e3ae302ab46c26836a4d0ee2768

    • SHA1

      e467099b5fd82d7989e33169f3a1979776fc28a3

    • SHA256

      715b1639199a7bac9ccecc2d174c5e794b5edb6ffec3b72af7b904f0683d9f49

    • SHA512

      4e0f7d31cad387cdee5b73c36e0e11a64676d2b04cdedc26e375398780f1af99c7ec55616570d1fefc0016b685c96558e8d85c2aa6b9453fd41148a47e79258d

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks