Overview

overview

10

Static

static

3

d35c22d2e3...ce.dll

windows7-x64

10

d35c22d2e3...ce.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d35c22d2e3cc029f71852ea0b4d9cbce

  • Size

    171KB

  • Sample

    240318-nbehaafd34

  • MD5

    d35c22d2e3cc029f71852ea0b4d9cbce

  • SHA1

    4cdee0c6986b5e215642e1e3dd46af0154d4bb4a

  • SHA256

    cccd32ec4aa1a51610c243b1099ce79fc241452ed8ab90200008c6932df0c82c

  • SHA512

    8e310ef9a0a195e58fb0ee9e0d13d956c8bbcf870cdb8ca7eb19989da2239fd0e45cb1b3c0268f936140b4c8fcc25807753969e1c624453bc63d50231b88644a

  • SSDEEP

    3072:dDZDVVA+DQ5JTOfEb18qFafjqvTwQJeWLq9NxbKejRGEjh:dzVAfqfER8qFOqv8eeWLqRb3QE

Score
10/10
dridex22203botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22203

C2

137.74.112.43:443

216.108.227.55:6225

94.177.176.51:5723
rc4.plain
rc4.plain

Targets

    • Target

      d35c22d2e3cc029f71852ea0b4d9cbce

    • Size

      171KB

    • MD5

      d35c22d2e3cc029f71852ea0b4d9cbce

    • SHA1

      4cdee0c6986b5e215642e1e3dd46af0154d4bb4a

    • SHA256

      cccd32ec4aa1a51610c243b1099ce79fc241452ed8ab90200008c6932df0c82c

    • SHA512

      8e310ef9a0a195e58fb0ee9e0d13d956c8bbcf870cdb8ca7eb19989da2239fd0e45cb1b3c0268f936140b4c8fcc25807753969e1c624453bc63d50231b88644a

    • SSDEEP

      3072:dDZDVVA+DQ5JTOfEb18qFafjqvTwQJeWLq9NxbKejRGEjh:dzVAfqfER8qFOqv8eeWLqRb3QE

    Score
    10/10
    dridex22203botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks