Overview

overview

10

Static

static

9964db6717...04.dll

windows7_x64

10

9964db6717...04.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9964db67176dea39fae2922636a42d8b246d6f5f8b900ec8811589baec74ff04

  • Size

    364KB

  • Sample

    220625-fzgzbahgh3

  • MD5

    971599aea536c511a27cc5b34216cc47

  • SHA1

    14fadefb9927148a490dbc4782f45471e4e80f78

  • SHA256

    9964db67176dea39fae2922636a42d8b246d6f5f8b900ec8811589baec74ff04

  • SHA512

    4430b3acb90b5e540930c18a799f46282f1f5dafbda7a0cb909bfd9aaa332cfd7e1609c00e22e3c080e762ce923de7beb54fd3433a49ae5fd2c289515571d719

Score
10/10
dridexbotnetloader

Malware Config

Extracted

Family

dridex

C2

176.126.243.82:443

167.114.122.37:691

66.34.201.20:8443

46.105.111.191:691

Targets

    • Target

      9964db67176dea39fae2922636a42d8b246d6f5f8b900ec8811589baec74ff04

    • Size

      364KB

    • MD5

      971599aea536c511a27cc5b34216cc47

    • SHA1

      14fadefb9927148a490dbc4782f45471e4e80f78

    • SHA256

      9964db67176dea39fae2922636a42d8b246d6f5f8b900ec8811589baec74ff04

    • SHA512

      4430b3acb90b5e540930c18a799f46282f1f5dafbda7a0cb909bfd9aaa332cfd7e1609c00e22e3c080e762ce923de7beb54fd3433a49ae5fd2c289515571d719

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks