Overview

overview

10

Static

static

3

dbe5103f4c...ad.dll

windows7-x64

10

dbe5103f4c...ad.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbe5103f4c9696f65ceba05fcfe339ad

  • Size

    188KB

  • Sample

    240321-r8bdnsfe5x

  • MD5

    dbe5103f4c9696f65ceba05fcfe339ad

  • SHA1

    c2aaedb088ef19020675f20c98ef90556a17e0c0

  • SHA256

    951f58f7437e8a442bfc6bca76a7d63abdf57d78979c07b729f7d930b96bf7c7

  • SHA512

    d53bdd262a013540656ba563e4119db0d50e18dc133460a1dd471cdc63434a4c585925f842e58d41c7be990ecc521c57d4f163bde70780f78fa6fd8b7680c719

  • SSDEEP

    3072:FA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoKo:FzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      dbe5103f4c9696f65ceba05fcfe339ad

    • Size

      188KB

    • MD5

      dbe5103f4c9696f65ceba05fcfe339ad

    • SHA1

      c2aaedb088ef19020675f20c98ef90556a17e0c0

    • SHA256

      951f58f7437e8a442bfc6bca76a7d63abdf57d78979c07b729f7d930b96bf7c7

    • SHA512

      d53bdd262a013540656ba563e4119db0d50e18dc133460a1dd471cdc63434a4c585925f842e58d41c7be990ecc521c57d4f163bde70780f78fa6fd8b7680c719

    • SSDEEP

      3072:FA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoKo:FzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks