Overview

overview

10

Static

static

3

d7c317d3a8...f7.dll

windows7-x64

10

d7c317d3a8...f7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7c317d3a874116b189e17a0d88b55f7

  • Size

    188KB

  • Sample

    240320-dyzfvsff82

  • MD5

    d7c317d3a874116b189e17a0d88b55f7

  • SHA1

    3ebd0aceea7b8aa83b7f3d7c0d9ca63326749506

  • SHA256

    44727be033baf3ec7489cfc0854e2a9c0355da56fe40bdc104b2e21ab3fc4bca

  • SHA512

    0ad265fa0bcdcabc7e5f96ad477d23e12c96df7bd850a74cbb7084689436777f956d9e2bfd7243cb5070934d897d7ce04fac622cdb86c2574bb6f0a9e012f5c3

  • SSDEEP

    3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoFo:/zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      d7c317d3a874116b189e17a0d88b55f7

    • Size

      188KB

    • MD5

      d7c317d3a874116b189e17a0d88b55f7

    • SHA1

      3ebd0aceea7b8aa83b7f3d7c0d9ca63326749506

    • SHA256

      44727be033baf3ec7489cfc0854e2a9c0355da56fe40bdc104b2e21ab3fc4bca

    • SHA512

      0ad265fa0bcdcabc7e5f96ad477d23e12c96df7bd850a74cbb7084689436777f956d9e2bfd7243cb5070934d897d7ce04fac622cdb86c2574bb6f0a9e012f5c3

    • SSDEEP

      3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoFo:/zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks