Overview

overview

10

Static

static

3

d9c14d537c...98.dll

windows7-x64

10

d9c14d537c...98.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9c14d537cd3acbdbdada6ab415ec998

  • Size

    188KB

  • Sample

    240320-zav97aac46

  • MD5

    d9c14d537cd3acbdbdada6ab415ec998

  • SHA1

    48594ec3847ae3b2fdad3f79e0cce06068165ca9

  • SHA256

    77dfe792e035c7e2ae017f402b464754ceeda48c03eb8cf2f1286af6764af71a

  • SHA512

    ecc818f94352410f7aac01a3725b57cbb98c1ba3caf451555b1de955132c2fe847d63489ba919d8477fd0af2214dd35abb213651dc686f90d22bd6c420b37ec3

  • SSDEEP

    3072:zA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:zzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      d9c14d537cd3acbdbdada6ab415ec998

    • Size

      188KB

    • MD5

      d9c14d537cd3acbdbdada6ab415ec998

    • SHA1

      48594ec3847ae3b2fdad3f79e0cce06068165ca9

    • SHA256

      77dfe792e035c7e2ae017f402b464754ceeda48c03eb8cf2f1286af6764af71a

    • SHA512

      ecc818f94352410f7aac01a3725b57cbb98c1ba3caf451555b1de955132c2fe847d63489ba919d8477fd0af2214dd35abb213651dc686f90d22bd6c420b37ec3

    • SSDEEP

      3072:zA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoao:zzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks