Overview

overview

10

Static

static

3

b2c92bf5e9...08.dll

windows7-x64

10

b2c92bf5e9...08.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2c92bf5e9b61d5a8ec68fda5e205208

  • Size

    184KB

  • Sample

    240304-wvx3qsac47

  • MD5

    b2c92bf5e9b61d5a8ec68fda5e205208

  • SHA1

    95a5e99eab61e9a6bba9bf04c15a6c1954d60c5e

  • SHA256

    a12cbc75dc6cf03d8e031e14a632ad79b7a580adcf07e7f3043afcceea279fd2

  • SHA512

    2e9b14397a77957abcf09a66d8e5766955c630f716b95f832d7ab26ab4186ca4195a22a797d64448a1c8bf948238afabc067a3b5c8fdf8faabe45a5ff8106c21

  • SSDEEP

    3072:7cYhzpn9z75jWpmrL3gA99hXkKsorn+AOr4R1jvaT:7cIntom33RDvn+Rrer

Score
10/10
dridex22203botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723
rc4.plain
rc4.plain

Targets

    • Target

      b2c92bf5e9b61d5a8ec68fda5e205208

    • Size

      184KB

    • MD5

      b2c92bf5e9b61d5a8ec68fda5e205208

    • SHA1

      95a5e99eab61e9a6bba9bf04c15a6c1954d60c5e

    • SHA256

      a12cbc75dc6cf03d8e031e14a632ad79b7a580adcf07e7f3043afcceea279fd2

    • SHA512

      2e9b14397a77957abcf09a66d8e5766955c630f716b95f832d7ab26ab4186ca4195a22a797d64448a1c8bf948238afabc067a3b5c8fdf8faabe45a5ff8106c21

    • SSDEEP

      3072:7cYhzpn9z75jWpmrL3gA99hXkKsorn+AOr4R1jvaT:7cIntom33RDvn+Rrer

    Score
    10/10
    dridex22203botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks