Overview

overview

10

Static

static

3

dca1204ba0...2c.dll

windows7-x64

10

dca1204ba0...2c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dca1204ba0e179afc810ada1a15da52c

  • Size

    188KB

  • Sample

    240321-z476vaae62

  • MD5

    dca1204ba0e179afc810ada1a15da52c

  • SHA1

    05ae97cac83803554914a999c25a78d8e6ffa5a4

  • SHA256

    db99c68fb65ea32416ae22c3bcf771af21c69a479238ad553b5e3be9077c132f

  • SHA512

    9808a9a6cbfc737baa9db505b776a0dd89374cd2bdd39a7ea2391be75be147007c7d87390a9dad5552f60cf52fa345598793ee9d6f9357851b265cb5e12c80c8

  • SSDEEP

    3072:jA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoso:jzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      dca1204ba0e179afc810ada1a15da52c

    • Size

      188KB

    • MD5

      dca1204ba0e179afc810ada1a15da52c

    • SHA1

      05ae97cac83803554914a999c25a78d8e6ffa5a4

    • SHA256

      db99c68fb65ea32416ae22c3bcf771af21c69a479238ad553b5e3be9077c132f

    • SHA512

      9808a9a6cbfc737baa9db505b776a0dd89374cd2bdd39a7ea2391be75be147007c7d87390a9dad5552f60cf52fa345598793ee9d6f9357851b265cb5e12c80c8

    • SSDEEP

      3072:jA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoso:jzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks