Overview

overview

10

Static

static

3

de74a32ced...82.dll

windows7-x64

10

de74a32ced...82.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de74a32cedb42b6ee5bf103012327282

  • Size

    188KB

  • Sample

    240325-t4wj6ada73

  • MD5

    de74a32cedb42b6ee5bf103012327282

  • SHA1

    2a5db082bc334905a553c7115593cf6f59520ba6

  • SHA256

    c6427e44b96fdbaf9a0d42bf6fbd6e8d248a01322a6a81a199d5f547b82d78af

  • SHA512

    ed08c7f6e3fa8bcfca8a9e3ef61c2d5ef2a83d9c394bd50e9bbb60c069b593483538d242012d15728acd7a10ce21eb6c5422de6fdec2fc590c0940b3e1f46a4d

  • SSDEEP

    3072:nA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo6o:nzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      de74a32cedb42b6ee5bf103012327282

    • Size

      188KB

    • MD5

      de74a32cedb42b6ee5bf103012327282

    • SHA1

      2a5db082bc334905a553c7115593cf6f59520ba6

    • SHA256

      c6427e44b96fdbaf9a0d42bf6fbd6e8d248a01322a6a81a199d5f547b82d78af

    • SHA512

      ed08c7f6e3fa8bcfca8a9e3ef61c2d5ef2a83d9c394bd50e9bbb60c069b593483538d242012d15728acd7a10ce21eb6c5422de6fdec2fc590c0940b3e1f46a4d

    • SSDEEP

      3072:nA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAo6o:nzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks