Overview

overview

10

Static

static

3

e92acaf460...49.dll

windows7-x64

10

e92acaf460...49.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e92acaf460fb881a44557fff918cb849

  • Size

    184KB

  • Sample

    231222-tlgchsgca4

  • MD5

    e92acaf460fb881a44557fff918cb849

  • SHA1

    af19418d187ceb9ca34b216a9f78df22891d63a6

  • SHA256

    3a345bb434d180ffb94a84fdf80f96310de3d338fe5d9753e037b6251f2a160a

  • SHA512

    b1ec32ffdcdff2251b59b76d5ce39afc7fd337c6e08262c3e36b1e97e8d3f87bfd221f49fcd82a8c395d017400c7428515a459922d13113d4c71faf0b2676ff6

  • SSDEEP

    3072:DgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdggdA4l:WPFkq6zOe5ilSanOPd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      e92acaf460fb881a44557fff918cb849

    • Size

      184KB

    • MD5

      e92acaf460fb881a44557fff918cb849

    • SHA1

      af19418d187ceb9ca34b216a9f78df22891d63a6

    • SHA256

      3a345bb434d180ffb94a84fdf80f96310de3d338fe5d9753e037b6251f2a160a

    • SHA512

      b1ec32ffdcdff2251b59b76d5ce39afc7fd337c6e08262c3e36b1e97e8d3f87bfd221f49fcd82a8c395d017400c7428515a459922d13113d4c71faf0b2676ff6

    • SSDEEP

      3072:DgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdggdA4l:WPFkq6zOe5ilSanOPd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks