Overview

overview

10

Static

static

3

dbaca99499...42.dll

windows7-x64

10

dbaca99499...42.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbaca99499efcc1f92ab015f3d943842

  • Size

    184KB

  • Sample

    240321-p5k3labh64

  • MD5

    dbaca99499efcc1f92ab015f3d943842

  • SHA1

    87c1131c501db64ffb7bfa6009314e48877b07af

  • SHA256

    40c2523c77ab0e7fd8400dd72af1d924fccb9bc08009686b0ee3f9f7b198cec9

  • SHA512

    f5106a7e961b4c14f473bee49d0c8ff29b55cc2e415fa606a35a4d5ddb27144f9576ab5cd8532b2f5f305de63903e5237c429ee204b106c0fc3fce8b03821cb0

  • SSDEEP

    3072:Uhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JSVQcY:U3fOeIv54W6SFKfc9me9v9/JSV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      dbaca99499efcc1f92ab015f3d943842

    • Size

      184KB

    • MD5

      dbaca99499efcc1f92ab015f3d943842

    • SHA1

      87c1131c501db64ffb7bfa6009314e48877b07af

    • SHA256

      40c2523c77ab0e7fd8400dd72af1d924fccb9bc08009686b0ee3f9f7b198cec9

    • SHA512

      f5106a7e961b4c14f473bee49d0c8ff29b55cc2e415fa606a35a4d5ddb27144f9576ab5cd8532b2f5f305de63903e5237c429ee204b106c0fc3fce8b03821cb0

    • SSDEEP

      3072:Uhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JSVQcY:U3fOeIv54W6SFKfc9me9v9/JSV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks