Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87f0c0b178eb3e41b69bf8e8edf82fc39cb18563746c7232ec461435593e0039

  • Size

    184KB

  • Sample

    240319-xgsfrsbg63

  • MD5

    ae44a5150bc60ee7d677c20ac1caf80d

  • SHA1

    ba79ebb10b1d1eaace0101eecf42ac08a577037b

  • SHA256

    87f0c0b178eb3e41b69bf8e8edf82fc39cb18563746c7232ec461435593e0039

  • SHA512

    331eeea44eb4f4070f746dd36022a521679190544144c3f5924014f70bb387c4e3a671a1c3e78425a96db153a3ba7cd6c3b699369c0a503cef541a7c15f030df

  • SSDEEP

    3072:9JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jla//2uFrSc:GfYOX+wTScR/Xzku9LVw2uG

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

80.241.218.90:443

103.161.172.109:13786

87.98.128.76:5723
rc4.plain
rc4.plain

Targets

    • Target

      87f0c0b178eb3e41b69bf8e8edf82fc39cb18563746c7232ec461435593e0039

    • Size

      184KB

    • MD5

      ae44a5150bc60ee7d677c20ac1caf80d

    • SHA1

      ba79ebb10b1d1eaace0101eecf42ac08a577037b

    • SHA256

      87f0c0b178eb3e41b69bf8e8edf82fc39cb18563746c7232ec461435593e0039

    • SHA512

      331eeea44eb4f4070f746dd36022a521679190544144c3f5924014f70bb387c4e3a671a1c3e78425a96db153a3ba7cd6c3b699369c0a503cef541a7c15f030df

    • SSDEEP

      3072:9JQ6H3ykY88YOSs+k1TwEuTcMIznNuOzlr1Xznku9Luk0eJww8Jla//2uFrSc:GfYOX+wTScR/Xzku9LVw2uG

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks