Overview

overview

10

Static

static

3

RlRWbPgiif...is.dll

windows7-x64

10

RlRWbPgiif...is.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RlRWbPgiifdickpenis.bin

  • Size

    524KB

  • Sample

    230630-pzx5zacc78

  • MD5

    6da0cae03023a10e31d7fb0a5d678723

  • SHA1

    5155209decb16eead575651f66d95398e6239982

  • SHA256

    ddb7acdcdb339543380bcb3d4633248ffe20e555104b26999a4c2ae2a40dfa14

  • SHA512

    c771f3ec5df0a3dd187cbe4face81f0f0cbaccb57ce64ed9b576d674d64ca268298dd0fc14f0bdf0e3811e5a58ce93dd196eccb5ae095348e9c1c27d4a1c0a2d

  • SSDEEP

    6144:xKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:x9hXAg5aX0CL8fI

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593
rc4.plain
rc4.plain

Targets

    • Target

      RlRWbPgiifdickpenis.bin

    • Size

      524KB

    • MD5

      6da0cae03023a10e31d7fb0a5d678723

    • SHA1

      5155209decb16eead575651f66d95398e6239982

    • SHA256

      ddb7acdcdb339543380bcb3d4633248ffe20e555104b26999a4c2ae2a40dfa14

    • SHA512

      c771f3ec5df0a3dd187cbe4face81f0f0cbaccb57ce64ed9b576d674d64ca268298dd0fc14f0bdf0e3811e5a58ce93dd196eccb5ae095348e9c1c27d4a1c0a2d

    • SSDEEP

      6144:xKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:x9hXAg5aX0CL8fI

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks