Overview

overview

10

Static

static

z4iavog6x.dll

windows7_x64

10

z4iavog6x.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    z4iavog6x.jpg

  • Size

    358KB

  • Sample

    220626-g3qajahhdq

  • MD5

    84048d4a704ca3ed43cf15d44dceeb39

  • SHA1

    621c3e992ac5c7f944b491d7ca3e4f07b9a20087

  • SHA256

    e014812592b1f4a0ff43b95117404149bdcb1dc82924a0f90b7b5ac4699b8dcc

  • SHA512

    d05eb0fafa8580f1f6594b4f7d55b3d8d808e3b3af61fcc502135d55fe384c41e34a44032bd5711211751d0bdb0fe9d0645c62b153bd7ca2094f43a5fceb674e

Score
10/10
dridex10444botnet

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

85.207.13.169:443

74.207.242.13:1688

176.58.101.200:49160

164.132.75.129:3388
rc4.plain
rc4.plain

Targets

    • Target

      z4iavog6x.jpg

    • Size

      358KB

    • MD5

      84048d4a704ca3ed43cf15d44dceeb39

    • SHA1

      621c3e992ac5c7f944b491d7ca3e4f07b9a20087

    • SHA256

      e014812592b1f4a0ff43b95117404149bdcb1dc82924a0f90b7b5ac4699b8dcc

    • SHA512

      d05eb0fafa8580f1f6594b4f7d55b3d8d808e3b3af61fcc502135d55fe384c41e34a44032bd5711211751d0bdb0fe9d0645c62b153bd7ca2094f43a5fceb674e

    Score
    10/10
    dridex10444botnet

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks