Overview

overview

10

Static

static

3

e08392d73a...80.dll

windows7-x64

10

e08392d73a...80.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e08392d73a5acd40f4ea275596f94c80

  • Size

    188KB

  • Sample

    240327-chvbjada6s

  • MD5

    e08392d73a5acd40f4ea275596f94c80

  • SHA1

    e2826055540982079d4a144b98f63f7e7442882c

  • SHA256

    e45141d9d5b4ebdd08ff52f5bcd3b563a4a659d21e67157ae1654d40bc9d8913

  • SHA512

    1c31a5c808096dfc398633068eff003056202a57d2fb5662553b9a11b48ea24b2de86e38ae3c663e7ec90e296abbf446e76d9242de3feb79367c45974909e03e

  • SSDEEP

    3072:sA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:szIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e08392d73a5acd40f4ea275596f94c80

    • Size

      188KB

    • MD5

      e08392d73a5acd40f4ea275596f94c80

    • SHA1

      e2826055540982079d4a144b98f63f7e7442882c

    • SHA256

      e45141d9d5b4ebdd08ff52f5bcd3b563a4a659d21e67157ae1654d40bc9d8913

    • SHA512

      1c31a5c808096dfc398633068eff003056202a57d2fb5662553b9a11b48ea24b2de86e38ae3c663e7ec90e296abbf446e76d9242de3feb79367c45974909e03e

    • SSDEEP

      3072:sA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAono:szIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks