Overview

overview

10

Static

static

3

df60aaf48e...97.dll

windows7-x64

10

df60aaf48e...97.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df60aaf48e69c12d241ad1b4acc8e097

  • Size

    188KB

  • Sample

    240326-rp9r5acb35

  • MD5

    df60aaf48e69c12d241ad1b4acc8e097

  • SHA1

    25b25c71b2c875706a4df3b613a524046a703673

  • SHA256

    1c1edcf3a0b52c7736c976e5636a3b6b5368b46974f07701a5442c35e8e21e5b

  • SHA512

    90ab6dd98eaeb8a699207609a3c7949f06c9bd50860e1b73f8b05677afa7756fcf289517f7b24f1b2434dfd55741c6be947e8f69efc3231e14c055a8f759d797

  • SSDEEP

    3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoKo:izIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      df60aaf48e69c12d241ad1b4acc8e097

    • Size

      188KB

    • MD5

      df60aaf48e69c12d241ad1b4acc8e097

    • SHA1

      25b25c71b2c875706a4df3b613a524046a703673

    • SHA256

      1c1edcf3a0b52c7736c976e5636a3b6b5368b46974f07701a5442c35e8e21e5b

    • SHA512

      90ab6dd98eaeb8a699207609a3c7949f06c9bd50860e1b73f8b05677afa7756fcf289517f7b24f1b2434dfd55741c6be947e8f69efc3231e14c055a8f759d797

    • SSDEEP

      3072:iA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoKo:izIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks