Overview

overview

10

Static

static

3

bdSEROOUIb...is.dll

windows7-x64

10

bdSEROOUIb...is.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdSEROOUIbrHdickpenis.bin

  • Size

    524KB

  • Sample

    230630-pzxt7sdc8w

  • MD5

    7e13728a352528d876f1037a4f97a928

  • SHA1

    d49c865566649adcd4c8114c3a3785080ee44c3b

  • SHA256

    59ac15b6de9e5065e58ccc24797e3bb36e2a4eb4348e83979781cc880a3456c0

  • SHA512

    8910c770e3a51f4add7f7614b5f8b574ebc5e55079e27b518e420a762d338d625bb4c23b0818fb9f5d9375d815c5054bbd1c8d879adb9e34b6cedf3097d11003

  • SSDEEP

    6144:LKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:L9hXAg5aX0CL8fI

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

104.36.167.47:443

188.40.48.93:4664

162.241.33.132:9217

217.160.5.104:593
rc4.plain
rc4.plain

Targets

    • Target

      bdSEROOUIbrHdickpenis.bin

    • Size

      524KB

    • MD5

      7e13728a352528d876f1037a4f97a928

    • SHA1

      d49c865566649adcd4c8114c3a3785080ee44c3b

    • SHA256

      59ac15b6de9e5065e58ccc24797e3bb36e2a4eb4348e83979781cc880a3456c0

    • SHA512

      8910c770e3a51f4add7f7614b5f8b574ebc5e55079e27b518e420a762d338d625bb4c23b0818fb9f5d9375d815c5054bbd1c8d879adb9e34b6cedf3097d11003

    • SSDEEP

      6144:LKMImhktm7mnmvetmzK/kxwv4Zm7mREqZzdazdULd54f3X0kdVtL8faGAPlX:L9hXAg5aX0CL8fI

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks