Overview

overview

10

Static

static

3

e0373c21d5...88.dll

windows7-x64

10

e0373c21d5...88.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0373c21d5490b02e208235a85e4bf88

  • Size

    188KB

  • Sample

    240326-13s6zagf8v

  • MD5

    e0373c21d5490b02e208235a85e4bf88

  • SHA1

    3df9d238e7616c099544739205138156f295b455

  • SHA256

    95bfc87ed9c8069b148c06141db9f036041c5ec824c618605f86f40bbb86bc26

  • SHA512

    4bf56bf498e9b50135a38a4d4f7f5ec3dee6b3a4a26bfcc8a979a23cd083e54d19b52c3931d95d4419ad827a9ac8db45206ff7c59a9abbe18a90a6ba052be902

  • SSDEEP

    3072:CA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAovo:CzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e0373c21d5490b02e208235a85e4bf88

    • Size

      188KB

    • MD5

      e0373c21d5490b02e208235a85e4bf88

    • SHA1

      3df9d238e7616c099544739205138156f295b455

    • SHA256

      95bfc87ed9c8069b148c06141db9f036041c5ec824c618605f86f40bbb86bc26

    • SHA512

      4bf56bf498e9b50135a38a4d4f7f5ec3dee6b3a4a26bfcc8a979a23cd083e54d19b52c3931d95d4419ad827a9ac8db45206ff7c59a9abbe18a90a6ba052be902

    • SSDEEP

      3072:CA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAovo:CzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks