Overview

overview

10

Static

static

3

df08abbd59...87.dll

windows7-x64

10

df08abbd59...87.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df08abbd59491833144ccc3de86a0887

  • Size

    184KB

  • Sample

    240326-nee8zsbg41

  • MD5

    df08abbd59491833144ccc3de86a0887

  • SHA1

    be366c5f18ad00e053fd8772b39683c47019a16b

  • SHA256

    2ce150540f9ff57a814c1cfcd694f1874f721f35b631cc2c5053d293d34a72bb

  • SHA512

    27a425db4011ed86a145e821de3b557fc9a3bc8a9543668954d88114bcb6cd9e75028ab21b25cd8fc05d62238d0bee091905fa78ec59eb0cf129c54a33044223

  • SSDEEP

    3072:Hhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JaVQcY:H3fOeIv54W6SFKfc9me9v9/JaV

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      df08abbd59491833144ccc3de86a0887

    • Size

      184KB

    • MD5

      df08abbd59491833144ccc3de86a0887

    • SHA1

      be366c5f18ad00e053fd8772b39683c47019a16b

    • SHA256

      2ce150540f9ff57a814c1cfcd694f1874f721f35b631cc2c5053d293d34a72bb

    • SHA512

      27a425db4011ed86a145e821de3b557fc9a3bc8a9543668954d88114bcb6cd9e75028ab21b25cd8fc05d62238d0bee091905fa78ec59eb0cf129c54a33044223

    • SSDEEP

      3072:Hhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33JaVQcY:H3fOeIv54W6SFKfc9me9v9/JaV

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks