Overview

overview

10

Static

static

vgvlr0ykx.dll

windows7_x64

10

vgvlr0ykx.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    vgvlr0ykx.zip

  • Size

    476KB

  • Sample

    220611-vn422adcd2

  • MD5

    be1e405e7e1e0187eba44c796708136a

  • SHA1

    42062f252e3a92681bdf37f4cebf41a3ca0455fc

  • SHA256

    e355f8f2b0f8890c4c3f30df36ab76bce5c7bd6bae25f28cdea9e362f4840ffc

  • SHA512

    79fea7f971dbf698dea5dfa7fbc25b98dfa98a193299d1e2b85381088a8948b7f361cca3c5c219bc880f4ce668fb3bb07d6680042505a703ab56a7be0a4126ed

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664
rc4.plain
rc4.plain

Targets

    • Target

      vgvlr0ykx.zip

    • Size

      476KB

    • MD5

      be1e405e7e1e0187eba44c796708136a

    • SHA1

      42062f252e3a92681bdf37f4cebf41a3ca0455fc

    • SHA256

      e355f8f2b0f8890c4c3f30df36ab76bce5c7bd6bae25f28cdea9e362f4840ffc

    • SHA512

      79fea7f971dbf698dea5dfa7fbc25b98dfa98a193299d1e2b85381088a8948b7f361cca3c5c219bc880f4ce668fb3bb07d6680042505a703ab56a7be0a4126ed

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks