Overview

overview

10

Static

static

3

55de3b5500...d4.dll

windows7-x64

10

55de3b5500...d4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55de3b55003ab92e521d25b55335ced4

  • Size

    175KB

  • Sample

    240112-jgrbtacfh5

  • MD5

    55de3b55003ab92e521d25b55335ced4

  • SHA1

    73a6f552cadc5fa9809ea6cd0c4e799aba74af66

  • SHA256

    0b32835f121d563857dc69b69ddfdd56dbd6ce93d7d6dce074891cf1c16e96e5

  • SHA512

    eed460ffcc0d57a9867dc43e872562c4cd5eb2ccd4eddc173b91241ee07c4575c8eb3c221868445a6072f3ba41b6cd1ece27847a40acc1c0c6dffb939a0db199

  • SSDEEP

    3072:7CAOe6ths2hyT0DzJfN3ZKU3YkmN5Sw4Q2kUl59Pn9ZbAAW0f3:7CAOem/DzJhok45X4HP3b

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

46.55.222.10:443

104.248.178.90:4664

173.212.243.155:7002
rc4.plain
rc4.plain

Targets

    • Target

      55de3b55003ab92e521d25b55335ced4

    • Size

      175KB

    • MD5

      55de3b55003ab92e521d25b55335ced4

    • SHA1

      73a6f552cadc5fa9809ea6cd0c4e799aba74af66

    • SHA256

      0b32835f121d563857dc69b69ddfdd56dbd6ce93d7d6dce074891cf1c16e96e5

    • SHA512

      eed460ffcc0d57a9867dc43e872562c4cd5eb2ccd4eddc173b91241ee07c4575c8eb3c221868445a6072f3ba41b6cd1ece27847a40acc1c0c6dffb939a0db199

    • SSDEEP

      3072:7CAOe6ths2hyT0DzJfN3ZKU3YkmN5Sw4Q2kUl59Pn9ZbAAW0f3:7CAOem/DzJhok45X4HP3b

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks