Overview

overview

10

Static

static

3

79e6f6acb1...04.dll

windows7-x64

10

79e6f6acb1...04.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79e6f6acb1ac24738ba3b8cfaab1c304

  • Size

    188KB

  • Sample

    240127-ln5h5ahfa7

  • MD5

    79e6f6acb1ac24738ba3b8cfaab1c304

  • SHA1

    2b9b113ada6a2d7a94b8b109bb2660b73ac5adbb

  • SHA256

    2a650eac93cb91d81c778dfdf988e5c53548393ded449188c390fafe8c9ac777

  • SHA512

    d8b9ac91460e6d2ecd0934bab18347c491ba52ed3c018ad947308d7e7f4bb5992e4a2885335c4c5093d850a9dc792794d27b8b2da6adb0dc289eb2dc20570c4d

  • SSDEEP

    3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:/zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      79e6f6acb1ac24738ba3b8cfaab1c304

    • Size

      188KB

    • MD5

      79e6f6acb1ac24738ba3b8cfaab1c304

    • SHA1

      2b9b113ada6a2d7a94b8b109bb2660b73ac5adbb

    • SHA256

      2a650eac93cb91d81c778dfdf988e5c53548393ded449188c390fafe8c9ac777

    • SHA512

      d8b9ac91460e6d2ecd0934bab18347c491ba52ed3c018ad947308d7e7f4bb5992e4a2885335c4c5093d850a9dc792794d27b8b2da6adb0dc289eb2dc20570c4d

    • SSDEEP

      3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo2o:/zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks