Overview

overview

10

Static

static

3

e1383f9219...5c.dll

windows7-x64

10

e1383f9219...5c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1383f92190a9d93ffcf963d1e9fb65c

  • Size

    188KB

  • Sample

    240327-kawtdsbc7t

  • MD5

    e1383f92190a9d93ffcf963d1e9fb65c

  • SHA1

    edae0ce80581e96e0bb34d2a535cb620dc26bfcc

  • SHA256

    807d7db2248a4a6cd86a680c09328dc67d1cc5a71e919685071d7e3bda77854a

  • SHA512

    1d2c1fc07ad46a4034dd7c2b057b940eeb2e2980dc2aad4716c470aef0b012fbb54bd0bf9117ff30aa483fe5f83c24841dbcfff1bb090c4e5f627c77a155c81e

  • SSDEEP

    3072:wA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAolo:wzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e1383f92190a9d93ffcf963d1e9fb65c

    • Size

      188KB

    • MD5

      e1383f92190a9d93ffcf963d1e9fb65c

    • SHA1

      edae0ce80581e96e0bb34d2a535cb620dc26bfcc

    • SHA256

      807d7db2248a4a6cd86a680c09328dc67d1cc5a71e919685071d7e3bda77854a

    • SHA512

      1d2c1fc07ad46a4034dd7c2b057b940eeb2e2980dc2aad4716c470aef0b012fbb54bd0bf9117ff30aa483fe5f83c24841dbcfff1bb090c4e5f627c77a155c81e

    • SSDEEP

      3072:wA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAolo:wzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks