Overview

overview

10

Static

static

3

d98a36c416...e4.dll

windows7-x64

10

d98a36c416...e4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d98a36c416211f9b0563c1b2413ee2e4

  • Size

    188KB

  • Sample

    240320-xewqeagg7y

  • MD5

    d98a36c416211f9b0563c1b2413ee2e4

  • SHA1

    e7fa16540c57672b7fad942dc7204373d161687b

  • SHA256

    cfd9fcbf32e0bf24baf98ec320c65e81580f9cf79182d91c8f3d6fe50a7ee6ae

  • SHA512

    867ef482b623e0bc972c48f7928644fba24e7ec3b9464bc070b76b84b87fa0ade04e483acba5c012a029fd08bb3dd830157e5f800852319143ccf7e36f8111fd

  • SSDEEP

    3072:wA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoNo:wzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      d98a36c416211f9b0563c1b2413ee2e4

    • Size

      188KB

    • MD5

      d98a36c416211f9b0563c1b2413ee2e4

    • SHA1

      e7fa16540c57672b7fad942dc7204373d161687b

    • SHA256

      cfd9fcbf32e0bf24baf98ec320c65e81580f9cf79182d91c8f3d6fe50a7ee6ae

    • SHA512

      867ef482b623e0bc972c48f7928644fba24e7ec3b9464bc070b76b84b87fa0ade04e483acba5c012a029fd08bb3dd830157e5f800852319143ccf7e36f8111fd

    • SSDEEP

      3072:wA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoNo:wzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks