Overview

overview

10

Static

static

3

df6e7a558c...fc.dll

windows7-x64

10

df6e7a558c...fc.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df6e7a558c69958a0d09ff613d3794fc

  • Size

    184KB

  • Sample

    240326-r8971acf28

  • MD5

    df6e7a558c69958a0d09ff613d3794fc

  • SHA1

    113bc55303d4a334cfe311e365487f1976c4ffd2

  • SHA256

    7cdc32bdf8afff4b354a150f300549f3b2cbbc8bc6a8d142e94aa25de2677d0f

  • SHA512

    d0ac8875593058b0278c7a2502e0ac05f560de185562034fcf735ecd7c5349975ec2085a0be4b3321738e95bf75ab625c9b429f47d5eef2bbbe5177bbed05ae4

  • SSDEEP

    3072:Dhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J7VQcY:D3fOeIv54W6SFKfc9me9v9/J7V

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

51.79.50.122:443

222.124.142.67:10443

138.201.222.158:4664
rc4.plain
rc4.plain

Targets

    • Target

      df6e7a558c69958a0d09ff613d3794fc

    • Size

      184KB

    • MD5

      df6e7a558c69958a0d09ff613d3794fc

    • SHA1

      113bc55303d4a334cfe311e365487f1976c4ffd2

    • SHA256

      7cdc32bdf8afff4b354a150f300549f3b2cbbc8bc6a8d142e94aa25de2677d0f

    • SHA512

      d0ac8875593058b0278c7a2502e0ac05f560de185562034fcf735ecd7c5349975ec2085a0be4b3321738e95bf75ab625c9b429f47d5eef2bbbe5177bbed05ae4

    • SSDEEP

      3072:Dhd6lp2ffOeP3gv+i4W63iFfKfXM9mQltYwgO226+f33J7VQcY:D3fOeIv54W6SFKfc9me9v9/J7V

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks