Overview

overview

10

Static

static

3

CdNiUWXvKR...is.dll

windows7-x64

10

CdNiUWXvKR...is.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CdNiUWXvKRUbUidickpenis.bin

  • Size

    524KB

  • Sample

    230630-py4lcsdc6v

  • MD5

    0b7cdcbfe986f4542ebc4bf1cb8fef0f

  • SHA1

    ae337e42c76811ffde7c2f92ae9bbf96ca25dc43

  • SHA256

    95d1beab5c48ef14f201aa49b734444ecc9dc9516d950f4c3cef8eadc0d9fbba

  • SHA512

    bce053be85871abfe550074f99b402942804738da31d1a92902bc2a6fd9f87567cfc3b9dfe1d11fd725a9ddb656815039023e2f9bf2ebc8d6ad00ee691d21af5

  • SSDEEP

    6144:YoKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:t9hXAg5aX0CL8fI

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593
rc4.plain
rc4.plain

Targets

    • Target

      CdNiUWXvKRUbUidickpenis.bin

    • Size

      524KB

    • MD5

      0b7cdcbfe986f4542ebc4bf1cb8fef0f

    • SHA1

      ae337e42c76811ffde7c2f92ae9bbf96ca25dc43

    • SHA256

      95d1beab5c48ef14f201aa49b734444ecc9dc9516d950f4c3cef8eadc0d9fbba

    • SHA512

      bce053be85871abfe550074f99b402942804738da31d1a92902bc2a6fd9f87567cfc3b9dfe1d11fd725a9ddb656815039023e2f9bf2ebc8d6ad00ee691d21af5

    • SSDEEP

      6144:YoKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:t9hXAg5aX0CL8fI

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks