Overview

overview

10

Static

static

3

3ccf6fb53a...81.dll

windows7-x64

10

3ccf6fb53a...81.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ccf6fb53a696e653ba23c254411c081

  • Size

    171KB

  • Sample

    240101-n8mvxsadcq

  • MD5

    3ccf6fb53a696e653ba23c254411c081

  • SHA1

    92ddd94801e09973b2d828e39e3c74914da1a1b6

  • SHA256

    900d3f9c8c323bed1ab28c531754a8457e80d17183abdb6d4b121174bc67221b

  • SHA512

    633cdf1532757e02778f790bec018cc0a451419f4e0337f8c06241356f3655be1be6fff69ea4c08855d0a308845037feb2aaed9eb4c1bd0adc161e120d5cb025

  • SSDEEP

    3072:yDZDVVA+DQ5JTOfEb18qFafjqvTwQJeWLq9NxbKejEGEjh:yzVAfqfER8qFOqv8eeWLqRb3vE

Score
10/10
dridex22203botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723
rc4.plain
rc4.plain

Targets

    • Target

      3ccf6fb53a696e653ba23c254411c081

    • Size

      171KB

    • MD5

      3ccf6fb53a696e653ba23c254411c081

    • SHA1

      92ddd94801e09973b2d828e39e3c74914da1a1b6

    • SHA256

      900d3f9c8c323bed1ab28c531754a8457e80d17183abdb6d4b121174bc67221b

    • SHA512

      633cdf1532757e02778f790bec018cc0a451419f4e0337f8c06241356f3655be1be6fff69ea4c08855d0a308845037feb2aaed9eb4c1bd0adc161e120d5cb025

    • SSDEEP

      3072:yDZDVVA+DQ5JTOfEb18qFafjqvTwQJeWLq9NxbKejEGEjh:yzVAfqfER8qFOqv8eeWLqRb3vE

    Score
    10/10
    dridex22203botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks