Overview

overview

10

Static

static

3

epix12dx.dll

windows7-x64

10

epix12dx.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    epix12dx.rar

  • Size

    476KB

  • Sample

    230630-pz3qfscc95

  • MD5

    a3a64611273a16751d073c147b783c06

  • SHA1

    0757337ab4720ba52b02fca61fa5b294d6deba35

  • SHA256

    577f04df45d0e29c54c2ed22493da51147f7b07654b1551116e524dc576f4369

  • SHA512

    59f7263454511ee475742a6fa5046e1f7ba6fff82963817bfae8876cfef3f02dfe26463dfdeafcaf480d82bdfc3f5ead7cac9cf39b1dbc37932e93ee3e1f218a

  • SSDEEP

    12288:ojCfzehtApz4lzQvzU3H2Jz+BbAt3A1NkpzBTf/o1VlkOZVjWRk:MCfzehtApz4lzQvzU3H2Jz+BbAt3A1N1

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

23.246.204.126:443

151.106.39.36:8116

103.124.144.123:6891

172.105.78.60:4664
rc4.plain
rc4.plain

Targets

    • Target

      epix12dx.rar

    • Size

      476KB

    • MD5

      a3a64611273a16751d073c147b783c06

    • SHA1

      0757337ab4720ba52b02fca61fa5b294d6deba35

    • SHA256

      577f04df45d0e29c54c2ed22493da51147f7b07654b1551116e524dc576f4369

    • SHA512

      59f7263454511ee475742a6fa5046e1f7ba6fff82963817bfae8876cfef3f02dfe26463dfdeafcaf480d82bdfc3f5ead7cac9cf39b1dbc37932e93ee3e1f218a

    • SSDEEP

      12288:ojCfzehtApz4lzQvzU3H2Jz+BbAt3A1NkpzBTf/o1VlkOZVjWRk:MCfzehtApz4lzQvzU3H2Jz+BbAt3A1N1

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks