Overview

overview

10

Static

static

3

dedc1e8043...44.dll

windows7-x64

10

dedc1e8043...44.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dedc1e80432df5aa30ae9e63f5a82444

  • Size

    188KB

  • Sample

    240326-lq5lxafd76

  • MD5

    dedc1e80432df5aa30ae9e63f5a82444

  • SHA1

    48ee602c75de28207c244bdc7612ed81dc0db08e

  • SHA256

    9eea18beb233d9d007c0be3d29b1d2f3985d2bb9def51a016063f7f977cfd533

  • SHA512

    998c29a121ce6d6a673d4bd05b782edd2c136c6384d79c6bf844b33c8054d20a81d33c5d7d1268992f435065a0fb790c5ae55c4b5dd09da075acfc3b968aef00

  • SSDEEP

    3072:SA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAomo:SzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      dedc1e80432df5aa30ae9e63f5a82444

    • Size

      188KB

    • MD5

      dedc1e80432df5aa30ae9e63f5a82444

    • SHA1

      48ee602c75de28207c244bdc7612ed81dc0db08e

    • SHA256

      9eea18beb233d9d007c0be3d29b1d2f3985d2bb9def51a016063f7f977cfd533

    • SHA512

      998c29a121ce6d6a673d4bd05b782edd2c136c6384d79c6bf844b33c8054d20a81d33c5d7d1268992f435065a0fb790c5ae55c4b5dd09da075acfc3b968aef00

    • SSDEEP

      3072:SA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAomo:SzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks