Overview

overview

10

Static

static

3

e20f39ca5b...84.dll

windows7-x64

10

e20f39ca5b...84.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e20f39ca5ba584e215ba43e4248aca84

  • Size

    188KB

  • Sample

    240327-tg553sah3s

  • MD5

    e20f39ca5ba584e215ba43e4248aca84

  • SHA1

    252aad40d54bfdb10de28788e3cceee931bf0cb6

  • SHA256

    54d4a9e3965b127e28e7899e9c0d6266dc1c57a0da27946cf69376682d6011bc

  • SHA512

    57e8db2c0aef5ecb92b7c18f09295a2837c6e0aa8d73af9ee956c638c6067c3a3b19fa8918b97377b64e47f12d516c7c3e5c500e5de2ab4365a4cd512976e3a4

  • SSDEEP

    3072:EA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoio:EzIqATVfQeV2FZalKq6jtGJWuTmd

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.82.248.59:443

54.39.98.141:6602

103.109.247.8:10443
rc4.plain
rc4.plain

Targets

    • Target

      e20f39ca5ba584e215ba43e4248aca84

    • Size

      188KB

    • MD5

      e20f39ca5ba584e215ba43e4248aca84

    • SHA1

      252aad40d54bfdb10de28788e3cceee931bf0cb6

    • SHA256

      54d4a9e3965b127e28e7899e9c0d6266dc1c57a0da27946cf69376682d6011bc

    • SHA512

      57e8db2c0aef5ecb92b7c18f09295a2837c6e0aa8d73af9ee956c638c6067c3a3b19fa8918b97377b64e47f12d516c7c3e5c500e5de2ab4365a4cd512976e3a4

    • SSDEEP

      3072:EA8JmK7ATVfQeVqNFZa/9KzMXJ6jTFDlAwqWut5KZMzfeAAAoio:EzIqATVfQeV2FZalKq6jtGJWuTmd

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks