Overview

overview

10

Static

static

3

dbbafe04ca...0c.dll

windows7-x64

10

dbbafe04ca...0c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbbafe04cacfdff81b117600babc800c

  • Size

    188KB

  • Sample

    240321-qnrpgsdh7z

  • MD5

    dbbafe04cacfdff81b117600babc800c

  • SHA1

    89f602cc6b1db4a326959b9a2c069938a0def060

  • SHA256

    a7fee4777d1e3711e84140812a8691c44df04d6bb575cb1430cfa50248dc0d3c

  • SHA512

    f23f4af60a907c02d96341719e6de674b3d133d1452f766add32a4d76a4afae4664fd003d112febbcff3b86664a78fa0751e176a58465b2ac75dcb8237f14f0f

  • SSDEEP

    3072:kH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViW57dU:kUua/Pv7YNhRIEZDeXVpAxtMsxK

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      dbbafe04cacfdff81b117600babc800c

    • Size

      188KB

    • MD5

      dbbafe04cacfdff81b117600babc800c

    • SHA1

      89f602cc6b1db4a326959b9a2c069938a0def060

    • SHA256

      a7fee4777d1e3711e84140812a8691c44df04d6bb575cb1430cfa50248dc0d3c

    • SHA512

      f23f4af60a907c02d96341719e6de674b3d133d1452f766add32a4d76a4afae4664fd003d112febbcff3b86664a78fa0751e176a58465b2ac75dcb8237f14f0f

    • SSDEEP

      3072:kH0uyjZqEpAK+Gf78TBdrXkTM5vhRg9Esf0DwvtyMpVnpA+z6tX8sxKViW57dU:kUua/Pv7YNhRIEZDeXVpAxtMsxK

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks