Overview

overview

10

Static

static

3

dfc7ce8432...2c.dll

windows7-x64

10

dfc7ce8432...2c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfc7ce843293e8581cfd9cf58bdecd2c

  • Size

    188KB

  • Sample

    240326-wpvqesbd21

  • MD5

    dfc7ce843293e8581cfd9cf58bdecd2c

  • SHA1

    47fe97050ccc0fdfa1c9b6f999dac1481b65f572

  • SHA256

    77cab46910c3eee1ce6e2a2c97e91b7dff92b53d129daf6863f7093a007a29ae

  • SHA512

    e46b854365c207e583cc096e2b9a61b92ac45972fec22261ae5a4dd271bc72644f4c10268afc86b04433e0762689f63e4aebe4947007218e1bbd6903798bef1a

  • SSDEEP

    3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoEo:/zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      dfc7ce843293e8581cfd9cf58bdecd2c

    • Size

      188KB

    • MD5

      dfc7ce843293e8581cfd9cf58bdecd2c

    • SHA1

      47fe97050ccc0fdfa1c9b6f999dac1481b65f572

    • SHA256

      77cab46910c3eee1ce6e2a2c97e91b7dff92b53d129daf6863f7093a007a29ae

    • SHA512

      e46b854365c207e583cc096e2b9a61b92ac45972fec22261ae5a4dd271bc72644f4c10268afc86b04433e0762689f63e4aebe4947007218e1bbd6903798bef1a

    • SSDEEP

      3072:/A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoEo:/zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks