Overview

overview

10

Static

static

3

dce66ed819...b6.dll

windows7-x64

10

dce66ed819...b6.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dce66ed8196505d7524a3579e18a54b6

  • Size

    188KB

  • Sample

    240325-bth7zafb2v

  • MD5

    dce66ed8196505d7524a3579e18a54b6

  • SHA1

    4157e4313e0caac02d9aea08228b9f4eb5258c2b

  • SHA256

    934714a31d6fda38f19ddba9c7518c3f98f4f34f7f15f99e84136f2f2fb238d9

  • SHA512

    460d4119184327d70af7235c25b1ad15df58e689f30dc3f49988d3cf537f99e3427c307fe79826a400bff09c5329fadb28d27679aebf16e9a5b32bc12e7fd523

  • SSDEEP

    3072:WA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo0o:WzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      dce66ed8196505d7524a3579e18a54b6

    • Size

      188KB

    • MD5

      dce66ed8196505d7524a3579e18a54b6

    • SHA1

      4157e4313e0caac02d9aea08228b9f4eb5258c2b

    • SHA256

      934714a31d6fda38f19ddba9c7518c3f98f4f34f7f15f99e84136f2f2fb238d9

    • SHA512

      460d4119184327d70af7235c25b1ad15df58e689f30dc3f49988d3cf537f99e3427c307fe79826a400bff09c5329fadb28d27679aebf16e9a5b32bc12e7fd523

    • SSDEEP

      3072:WA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo0o:WzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks