Overview

overview

10

Static

static

3

db29303d32...d7.dll

windows7-x64

10

db29303d32...d7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db29303d32dc05481e17d88cb61e69d7

  • Size

    188KB

  • Sample

    240321-kclffagg7s

  • MD5

    db29303d32dc05481e17d88cb61e69d7

  • SHA1

    58c826eed9482fad1e3102e7d8e9200364feaf9b

  • SHA256

    75e8dd9867f84a8aa74247d98f71b02f0cc385902c8ee0bf0fb42d57ae973d84

  • SHA512

    02b0a0dd82d31b85e2884db6a39cd5d20298bd369aa856cd1ee4bbc47893f028a3a0d146d68653752019a15ba8ff6b4849bd15c01720e5eb58cc7eb032a5f135

  • SSDEEP

    3072:EA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoCo:EzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      db29303d32dc05481e17d88cb61e69d7

    • Size

      188KB

    • MD5

      db29303d32dc05481e17d88cb61e69d7

    • SHA1

      58c826eed9482fad1e3102e7d8e9200364feaf9b

    • SHA256

      75e8dd9867f84a8aa74247d98f71b02f0cc385902c8ee0bf0fb42d57ae973d84

    • SHA512

      02b0a0dd82d31b85e2884db6a39cd5d20298bd369aa856cd1ee4bbc47893f028a3a0d146d68653752019a15ba8ff6b4849bd15c01720e5eb58cc7eb032a5f135

    • SSDEEP

      3072:EA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoCo:EzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks