Overview

overview

10

Static

static

3

dfca69fe1e...c6.dll

windows7-x64

10

dfca69fe1e...c6.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfca69fe1e634e92696b13032383eac6

  • Size

    188KB

  • Sample

    240326-wt3xlabe6z

  • MD5

    dfca69fe1e634e92696b13032383eac6

  • SHA1

    389b1dfdd56714d4e23145775e424f085e9b8b33

  • SHA256

    e84da0c917c8406ad24610577a6b1884aa71aa090062f68b0ef5f28b2ee7a01b

  • SHA512

    c4cc132ce3bca4c99d231847109a1c81b72d9f2000d2b7b6cb60676a19ab505d8cfc126d5414441ae52968835d8487329d2bacf587fb1d2a0a7969fdc9c4a84b

  • SSDEEP

    3072:9A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoto:9zIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      dfca69fe1e634e92696b13032383eac6

    • Size

      188KB

    • MD5

      dfca69fe1e634e92696b13032383eac6

    • SHA1

      389b1dfdd56714d4e23145775e424f085e9b8b33

    • SHA256

      e84da0c917c8406ad24610577a6b1884aa71aa090062f68b0ef5f28b2ee7a01b

    • SHA512

      c4cc132ce3bca4c99d231847109a1c81b72d9f2000d2b7b6cb60676a19ab505d8cfc126d5414441ae52968835d8487329d2bacf587fb1d2a0a7969fdc9c4a84b

    • SSDEEP

      3072:9A8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoto:9zIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks