Overview

overview

10

Static

static

3

bc6edb5281...c3.dll

windows7-x64

10

bc6edb5281...c3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc6edb528142538f7a2a4f904ff35bc3

  • Size

    184KB

  • Sample

    240309-wfdqjsee9s

  • MD5

    bc6edb528142538f7a2a4f904ff35bc3

  • SHA1

    56bcf1091988ef44ec9069b488f82bd4755f7f67

  • SHA256

    8debe4a9dbdd8bc8da54aa1c5b034b75d28129743f5994a902a34e70108bad76

  • SHA512

    a523f80f5d5dbd60b49c6d26534e90edce427c7b30733b6edc4d73101fa89b03b73cef2b613f0ac96cbd05cf88191c5802dcb13ce3d4c42a53965a55e37de273

  • SSDEEP

    3072:ScYhzpn9z75jWpmrL3gA99hXkKsorn+AOr4R3jvaT:ScIntom33RDvn+Rrsr

Score
10/10
dridex22203botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723
rc4.plain
rc4.plain

Targets

    • Target

      bc6edb528142538f7a2a4f904ff35bc3

    • Size

      184KB

    • MD5

      bc6edb528142538f7a2a4f904ff35bc3

    • SHA1

      56bcf1091988ef44ec9069b488f82bd4755f7f67

    • SHA256

      8debe4a9dbdd8bc8da54aa1c5b034b75d28129743f5994a902a34e70108bad76

    • SHA512

      a523f80f5d5dbd60b49c6d26534e90edce427c7b30733b6edc4d73101fa89b03b73cef2b613f0ac96cbd05cf88191c5802dcb13ce3d4c42a53965a55e37de273

    • SSDEEP

      3072:ScYhzpn9z75jWpmrL3gA99hXkKsorn+AOr4R3jvaT:ScIntom33RDvn+Rrsr

    Score
    10/10
    dridex22203botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks