Overview

overview

10

Static

static

215dcfed26...52.dll

windows7_x64

10

215dcfed26...52.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    215dcfed2662b6c7271ccc2f9b3310dced8f3ffff6ce81c35e3ace792212e152.zip

  • Size

    167KB

  • Sample

    220614-nsejlsdfak

  • MD5

    6430f608005b5926eb99d238f91ddcec

  • SHA1

    95769a11be134d18adbabb6691565f65c640e6f1

  • SHA256

    c56dfec6432c96e3739b22a9bf960182b37a4f0fc4cd5cf6d2c85583d1d531d5

  • SHA512

    97e6170f6dd9caf751a6d2e2d63ff10f82597c99cd12d9ffc2848e6370046c870359fa136305ea9ee2f2bb49c34bc29660f31a89a40b42f11ef8ca3e7c26f45d

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

144.91.122.102:443

85.10.248.28:593

185.4.135.27:5228

80.211.3.13:8116
rc4.plain
rc4.plain

Targets

    • Target

      215dcfed2662b6c7271ccc2f9b3310dced8f3ffff6ce81c35e3ace792212e152.dll

    • Size

      532KB

    • MD5

      f7599a080e61e0dc8c3b794b428f8ea8

    • SHA1

      64119ed034d9569ad4aec5e7e5babdbfba0656cc

    • SHA256

      215dcfed2662b6c7271ccc2f9b3310dced8f3ffff6ce81c35e3ace792212e152

    • SHA512

      cca58d59d650f33ba060f94e1b6b93fc35028014e5e9b94ae42e9ee8b2ff1aa86dcdfbeb9546950382b12c1d3c00c6540a66c8c1e4a0fea036467776a9a5341b

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks