Overview

overview

10

Static

static

fb5djyes.dll

windows7-x64

10

fb5djyes.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb5djyes.rar

  • Size

    476KB

  • Sample

    220731-fty1msagbm

  • MD5

    0e078fcb83f7689e0a613d1e1f98592d

  • SHA1

    02c9122c00abce3664344232be0d821647f5438d

  • SHA256

    4cf90ed4044d8025261e4740f1b9a98ed5d2c63d9bd9758257bf0881b2e28aca

  • SHA512

    e9ac5a2955c040120b0c2eaa4326226ebd4699e252bf69899faf366d2ac760c816888c91bb5bef6e5520736645d5f923f1c037c82cf90e981313c911a9ac81be

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664
rc4.plain
rc4.plain

Targets

    • Target

      fb5djyes.rar

    • Size

      476KB

    • MD5

      0e078fcb83f7689e0a613d1e1f98592d

    • SHA1

      02c9122c00abce3664344232be0d821647f5438d

    • SHA256

      4cf90ed4044d8025261e4740f1b9a98ed5d2c63d9bd9758257bf0881b2e28aca

    • SHA512

      e9ac5a2955c040120b0c2eaa4326226ebd4699e252bf69899faf366d2ac760c816888c91bb5bef6e5520736645d5f923f1c037c82cf90e981313c911a9ac81be

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks