Overview

overview

10

Static

static

ow571qp9x.dll

windows7_x64

10

ow571qp9x.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ow571qp9x.zip

  • Size

    476KB

  • Sample

    220626-gkljmabbh4

  • MD5

    edd5e7e742a9cf2c2b410d9208278042

  • SHA1

    f1db2c4189850281f2fa163903750e7e549ee165

  • SHA256

    fa6aea596a04b6bd957babd156bbd40cafa2b0662390cc2fd30953fb48ec61fc

  • SHA512

    1c550da3d70359464b1082c93f76bad93aaa0bd059d6d5c3a80bd5808352b68e3be34b6574ae5a569f54cdbb120619cbede08ebfbb7ba455482159d80b400b73

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664
rc4.plain
rc4.plain

Targets

    • Target

      ow571qp9x.zip

    • Size

      476KB

    • MD5

      edd5e7e742a9cf2c2b410d9208278042

    • SHA1

      f1db2c4189850281f2fa163903750e7e549ee165

    • SHA256

      fa6aea596a04b6bd957babd156bbd40cafa2b0662390cc2fd30953fb48ec61fc

    • SHA512

      1c550da3d70359464b1082c93f76bad93aaa0bd059d6d5c3a80bd5808352b68e3be34b6574ae5a569f54cdbb120619cbede08ebfbb7ba455482159d80b400b73

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks