Overview

overview

10

Static

static

3

WPetkPdickpenis.dll

windows7-x64

10

WPetkPdickpenis.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WPetkPdickpenis.bin

  • Size

    524KB

  • Sample

    230630-pzxjfacc73

  • MD5

    e141d2e1c89da0b36625a8b610ebc4a4

  • SHA1

    f1da1edba0f5a4a574192e165f4f0be35839f4ee

  • SHA256

    3aab8f6eca123b1fc8184caa6ad3320ac6c9f58cd73835fac41feef05053abff

  • SHA512

    824b848c15988f38e59becd16366d384f2545a1d560596a08dbb0a60d1a4df47cc5a817b4ac99ba3d26b5b9a2712571278e7ac806e7f26394611da934da333c4

  • SSDEEP

    6144:EKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:E9hXAg5aX0CL8fI

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593
rc4.plain
rc4.plain

Targets

    • Target

      WPetkPdickpenis.bin

    • Size

      524KB

    • MD5

      e141d2e1c89da0b36625a8b610ebc4a4

    • SHA1

      f1da1edba0f5a4a574192e165f4f0be35839f4ee

    • SHA256

      3aab8f6eca123b1fc8184caa6ad3320ac6c9f58cd73835fac41feef05053abff

    • SHA512

      824b848c15988f38e59becd16366d384f2545a1d560596a08dbb0a60d1a4df47cc5a817b4ac99ba3d26b5b9a2712571278e7ac806e7f26394611da934da333c4

    • SSDEEP

      6144:EKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:E9hXAg5aX0CL8fI

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks