Overview

overview

10

Static

static

3

d9fb95d2b8...2e.dll

windows7-x64

10

d9fb95d2b8...2e.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9fb95d2b854c32797bf85fe1a8fd62e

  • Size

    188KB

  • Sample

    240320-2brphacg69

  • MD5

    d9fb95d2b854c32797bf85fe1a8fd62e

  • SHA1

    ae7d6d58a7e80c3db72cf54ea2ecae25264fc33c

  • SHA256

    21c7aaa319197a02b7a925a2ce949609a04c7b578d269b6cadd78f3636e69612

  • SHA512

    4d395dcbaba6c9e8075b9edac0fe188559df01612202444c5ceef4d65ff43a85fdf64b40b253bf4454caad62577bf9575902971191afc8b1e54115a3dd3d1a8d

  • SSDEEP

    3072:yA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoOo:yzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      d9fb95d2b854c32797bf85fe1a8fd62e

    • Size

      188KB

    • MD5

      d9fb95d2b854c32797bf85fe1a8fd62e

    • SHA1

      ae7d6d58a7e80c3db72cf54ea2ecae25264fc33c

    • SHA256

      21c7aaa319197a02b7a925a2ce949609a04c7b578d269b6cadd78f3636e69612

    • SHA512

      4d395dcbaba6c9e8075b9edac0fe188559df01612202444c5ceef4d65ff43a85fdf64b40b253bf4454caad62577bf9575902971191afc8b1e54115a3dd3d1a8d

    • SSDEEP

      3072:yA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoOo:yzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks