Overview

overview

10

Static

static

3

s7yzrmv13.dll

windows7-x64

10

s7yzrmv13.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    s7yzrmv13.rar

  • Size

    476KB

  • Sample

    230630-pz2hdsdd2s

  • MD5

    b9df50a14d692e7aac5cf697462379f0

  • SHA1

    0ac013a74fa5f75313774fb1c5294a4e0b9a3a75

  • SHA256

    0e16f533d18ae86ab8cadc43a44e9ff7fd6586658939b6c60d6ed9201c31f33a

  • SHA512

    eeb54214a759e8daef83d0197495b6985db5f37a5a6d8ba3ab941157ded0c149eb6ae3ee930fe7ec5fd22aaee009d0a33c419a9557d4db53c1077c10cb070a9b

  • SSDEEP

    12288:e7fimEsIsmY4K08oM1Wd8t5KQhNdv5z2:e7aVRBn7x6jtU

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664
rc4.plain
rc4.plain

Targets

    • Target

      s7yzrmv13.rar

    • Size

      476KB

    • MD5

      b9df50a14d692e7aac5cf697462379f0

    • SHA1

      0ac013a74fa5f75313774fb1c5294a4e0b9a3a75

    • SHA256

      0e16f533d18ae86ab8cadc43a44e9ff7fd6586658939b6c60d6ed9201c31f33a

    • SHA512

      eeb54214a759e8daef83d0197495b6985db5f37a5a6d8ba3ab941157ded0c149eb6ae3ee930fe7ec5fd22aaee009d0a33c419a9557d4db53c1077c10cb070a9b

    • SSDEEP

      12288:e7fimEsIsmY4K08oM1Wd8t5KQhNdv5z2:e7aVRBn7x6jtU

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks