Overview

overview

10

Static

static

3

dbb745b632...ce.dll

windows7-x64

10

dbb745b632...ce.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbb745b632747b1f0fec8f4afa550cce

  • Size

    184KB

  • Sample

    240321-qhmtcacc24

  • MD5

    dbb745b632747b1f0fec8f4afa550cce

  • SHA1

    c07c87596b700d39d8fe2bed6e5396f2eca6f37e

  • SHA256

    6a48182094065db7059198aa6dc75972c08b4fa0c786205c8101a704b08fff9a

  • SHA512

    1149a6a3b55f2848c08b993dace587f8cc750a79c3ea088a3dce2ff5c47439b351d3967a9b32c37223775ff10a00ce5f1342178baa1d4c20a3733d15b546751a

  • SSDEEP

    3072:Lhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JpVQcY:L3fOeIv54W6SFKfc9me9v9/JpV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      dbb745b632747b1f0fec8f4afa550cce

    • Size

      184KB

    • MD5

      dbb745b632747b1f0fec8f4afa550cce

    • SHA1

      c07c87596b700d39d8fe2bed6e5396f2eca6f37e

    • SHA256

      6a48182094065db7059198aa6dc75972c08b4fa0c786205c8101a704b08fff9a

    • SHA512

      1149a6a3b55f2848c08b993dace587f8cc750a79c3ea088a3dce2ff5c47439b351d3967a9b32c37223775ff10a00ce5f1342178baa1d4c20a3733d15b546751a

    • SSDEEP

      3072:Lhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JpVQcY:L3fOeIv54W6SFKfc9me9v9/JpV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks