Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0459ffa89fd4c07f07c48093c93db7762b1b6f85b355d645b4166b211de456b8

  • Size

    184KB

  • Sample

    240319-xgs3asbg67

  • MD5

    84c4ac098bfda384d3f74c4b21c4d882

  • SHA1

    073b64ea3ef2bfd504ce7f8fd832dfde608f1f2b

  • SHA256

    0459ffa89fd4c07f07c48093c93db7762b1b6f85b355d645b4166b211de456b8

  • SHA512

    876218fdbacb74900d25f6f3c5855e21d5947ee8fe5ccd5b59e175e94352c85ab2b4906aa26f01336b35d083a35fe38c538d302963e85007fdfa63e5ec9d92fc

  • SSDEEP

    3072:HJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jta//2uFrSc:0fYOX+wTScR/Xzku9LVwquG

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723
rc4.plain
rc4.plain

Targets

    • Target

      0459ffa89fd4c07f07c48093c93db7762b1b6f85b355d645b4166b211de456b8

    • Size

      184KB

    • MD5

      84c4ac098bfda384d3f74c4b21c4d882

    • SHA1

      073b64ea3ef2bfd504ce7f8fd832dfde608f1f2b

    • SHA256

      0459ffa89fd4c07f07c48093c93db7762b1b6f85b355d645b4166b211de456b8

    • SHA512

      876218fdbacb74900d25f6f3c5855e21d5947ee8fe5ccd5b59e175e94352c85ab2b4906aa26f01336b35d083a35fe38c538d302963e85007fdfa63e5ec9d92fc

    • SSDEEP

      3072:HJQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jta//2uFrSc:0fYOX+wTScR/Xzku9LVwquG

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks