Overview

overview

10

Static

static

3

ddf16eaf52...db.dll

windows7-x64

10

ddf16eaf52...db.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddf16eaf520452e0b89b54e2db67d9db

  • Size

    188KB

  • Sample

    240325-n1y8zshg71

  • MD5

    ddf16eaf520452e0b89b54e2db67d9db

  • SHA1

    d8140fd61ad9d7282c2deb3079876d88ae6207d5

  • SHA256

    5eea136a184f7037e4ee3c56728091afb9c9d241c5b53c6fdcf5d3d79abff0e1

  • SHA512

    d307ccaac4b57e432431a1801bff789fdac7834d624a15cda9d3e3634bf046702cdef58a3dfa4abca662e7fdce80cdb55145564b1bfaaad3a8327efbba9c9129

  • SSDEEP

    3072:fA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoMo:fzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      ddf16eaf520452e0b89b54e2db67d9db

    • Size

      188KB

    • MD5

      ddf16eaf520452e0b89b54e2db67d9db

    • SHA1

      d8140fd61ad9d7282c2deb3079876d88ae6207d5

    • SHA256

      5eea136a184f7037e4ee3c56728091afb9c9d241c5b53c6fdcf5d3d79abff0e1

    • SHA512

      d307ccaac4b57e432431a1801bff789fdac7834d624a15cda9d3e3634bf046702cdef58a3dfa4abca662e7fdce80cdb55145564b1bfaaad3a8327efbba9c9129

    • SSDEEP

      3072:fA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoMo:fzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks