Overview

overview

10

Static

static

3

ZyMQnTdickpenis.dll

windows7-x64

10

ZyMQnTdickpenis.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ZyMQnTdickpenis.bin

  • Size

    524KB

  • Sample

    230630-pzw8nsdc8s

  • MD5

    04459ef99e8cca019d3676bd52707e3a

  • SHA1

    0cac20c446ba5a0f79290c8b88b762774f046084

  • SHA256

    32f8a7972ce0593b753c37f18cce172e3ca2fdca15a0ea6ae6f392fd388a2e20

  • SHA512

    8d9e7010333d162b31a2244742ca65f8d2cfc46df7902911a8f265247b5f2c1ac80f71150f40caaae4dc4b17ab6a32bf050b73aca7e0e592512840a807b63ebb

  • SSDEEP

    6144:XKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:X9hXAg5aX0CL8fI

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593
rc4.plain
rc4.plain

Targets

    • Target

      ZyMQnTdickpenis.bin

    • Size

      524KB

    • MD5

      04459ef99e8cca019d3676bd52707e3a

    • SHA1

      0cac20c446ba5a0f79290c8b88b762774f046084

    • SHA256

      32f8a7972ce0593b753c37f18cce172e3ca2fdca15a0ea6ae6f392fd388a2e20

    • SHA512

      8d9e7010333d162b31a2244742ca65f8d2cfc46df7902911a8f265247b5f2c1ac80f71150f40caaae4dc4b17ab6a32bf050b73aca7e0e592512840a807b63ebb

    • SSDEEP

      6144:XKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:X9hXAg5aX0CL8fI

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks