Overview

overview

10

Static

static

3

ngKnznerdt...tq.dll

windows7-x64

10

ngKnznerdt...tq.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ngKnznerdtRLqCLkkklgbtq.bin

  • Size

    512KB

  • Sample

    230630-pztgsacc62

  • MD5

    e2ed08002db901030f341b022ad468ec

  • SHA1

    c430c4a6ba75e121128aa2a5fc7efe220675c073

  • SHA256

    27b24d442413bdb408f7d2e09f440a5fba2d5b2bf22ed2a99562c09dc3234fb3

  • SHA512

    af5d9602bec22fffdbe28465f460e3e5e2938a97c799d5c5fa6b47d52a78765730e3024698d3f80e0cd39781c9fd97d86645dce6968fc579188e8fe067da91ea

  • SSDEEP

    12288:f2cK4kV9W/k7MNKABzMyLi8E6+DnOM2SwyuRn:CkMs9

Score
10/10
dridex22203botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

51.159.52.196:443

134.209.247.135:6602

194.233.68.48:5228

89.31.56.58:593
rc4.plain
rc4.plain

Targets

    • Target

      ngKnznerdtRLqCLkkklgbtq.bin

    • Size

      512KB

    • MD5

      e2ed08002db901030f341b022ad468ec

    • SHA1

      c430c4a6ba75e121128aa2a5fc7efe220675c073

    • SHA256

      27b24d442413bdb408f7d2e09f440a5fba2d5b2bf22ed2a99562c09dc3234fb3

    • SHA512

      af5d9602bec22fffdbe28465f460e3e5e2938a97c799d5c5fa6b47d52a78765730e3024698d3f80e0cd39781c9fd97d86645dce6968fc579188e8fe067da91ea

    • SSDEEP

      12288:f2cK4kV9W/k7MNKABzMyLi8E6+DnOM2SwyuRn:CkMs9

    Score
    10/10
    dridex22203botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks