Overview

overview

10

Static

static

3

dd9d3eff00...b9.dll

windows7-x64

10

dd9d3eff00...b9.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd9d3eff0038941807e9659766de8cb9

  • Size

    188KB

  • Sample

    240325-kvqswaef2v

  • MD5

    dd9d3eff0038941807e9659766de8cb9

  • SHA1

    b32d351587088ed85855ccb447695c6d3778cdf5

  • SHA256

    984f8a78ede31cd82d9dedb4c20c77773071d834c970f30ac2b21672eb99e721

  • SHA512

    b9dd5b133575c81f5de35991023dff91698cf6e5c80d3791cd16958bdff678973718285df53c8266914546b1bf018f9bc6b56cb2a8bc4476e5f0013cb081c3a6

  • SSDEEP

    3072:vA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoVo:vzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      dd9d3eff0038941807e9659766de8cb9

    • Size

      188KB

    • MD5

      dd9d3eff0038941807e9659766de8cb9

    • SHA1

      b32d351587088ed85855ccb447695c6d3778cdf5

    • SHA256

      984f8a78ede31cd82d9dedb4c20c77773071d834c970f30ac2b21672eb99e721

    • SHA512

      b9dd5b133575c81f5de35991023dff91698cf6e5c80d3791cd16958bdff678973718285df53c8266914546b1bf018f9bc6b56cb2a8bc4476e5f0013cb081c3a6

    • SSDEEP

      3072:vA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoVo:vzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks