Overview

overview

10

Static

static

3

ReMxcvxKeO...is.dll

windows7-x64

10

ReMxcvxKeO...is.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ReMxcvxKeOzodickpenis.bin

  • Size

    524KB

  • Sample

    230630-py5tesdc6w

  • MD5

    153c98b351ba1f82f552d663addacb46

  • SHA1

    bacc8ab8f4da9c6c864d88174315148e7fe9994e

  • SHA256

    a7919340edfbafcf10751579a93ee23b1fe864d9680d553bd254422d14ffeeb0

  • SHA512

    5118d14e75103797a7f1764ddb2fbf79851c8a5baf8f0a424c2c333568b5685701199f1e61846061e44c95e05e48e0b5361b34be95462d7d6d8f0a72102478ce

  • SSDEEP

    6144:qKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:q9hXAg5aX0CL8fI

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593
rc4.plain
rc4.plain

Targets

    • Target

      ReMxcvxKeOzodickpenis.bin

    • Size

      524KB

    • MD5

      153c98b351ba1f82f552d663addacb46

    • SHA1

      bacc8ab8f4da9c6c864d88174315148e7fe9994e

    • SHA256

      a7919340edfbafcf10751579a93ee23b1fe864d9680d553bd254422d14ffeeb0

    • SHA512

      5118d14e75103797a7f1764ddb2fbf79851c8a5baf8f0a424c2c333568b5685701199f1e61846061e44c95e05e48e0b5361b34be95462d7d6d8f0a72102478ce

    • SSDEEP

      6144:qKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:q9hXAg5aX0CL8fI

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks