Overview

overview

10

Static

static

oithak.dll

windows7_x64

10

oithak.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    oithak.rar

  • Size

    476KB

  • Sample

    220626-gjz1mabbg3

  • MD5

    b0105f4cb8deb73bf813d0881781c2a9

  • SHA1

    3781d4a2fd04cfe91f063d064a46d14d9b2150c2

  • SHA256

    47ccaacdb3f46f8578825f19d50b5d93d8a0dc57f114fc329ee41c8a6f15b88a

  • SHA512

    3605c8e0782a5e841d9b2b1938fcbba2a226830eff86ef3d653c2f2a26a46763c1f8acb595d279164916feaf92e83695a7fa3658e4a0bc2e6717906ba2783eb5

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664
rc4.plain
rc4.plain

Targets

    • Target

      oithak.rar

    • Size

      476KB

    • MD5

      b0105f4cb8deb73bf813d0881781c2a9

    • SHA1

      3781d4a2fd04cfe91f063d064a46d14d9b2150c2

    • SHA256

      47ccaacdb3f46f8578825f19d50b5d93d8a0dc57f114fc329ee41c8a6f15b88a

    • SHA512

      3605c8e0782a5e841d9b2b1938fcbba2a226830eff86ef3d653c2f2a26a46763c1f8acb595d279164916feaf92e83695a7fa3658e4a0bc2e6717906ba2783eb5

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks