Overview

overview

10

Static

static

3

99fa0463d4...d4.dll

windows7-x64

10

99fa0463d4...d4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99fa0463d43d5d9d282437fa6fd59b122160ff87ca6572aa879afe0454f1bad4

  • Size

    180KB

  • Sample

    240423-g5tqqseb8z

  • MD5

    bd602dd935b6687c7a31fffd288a2b6a

  • SHA1

    772d8bdee61a315b94b168ff1c675b6202bc88dc

  • SHA256

    99fa0463d43d5d9d282437fa6fd59b122160ff87ca6572aa879afe0454f1bad4

  • SHA512

    52d19ed1a07cf262861d0b114db2c391b02b01439835c0801547a40e3f577bf2fb643facd9881df5b916bcdc4bec0e5a2cf53ccf2bc7afa7aacd92376aefad43

  • SSDEEP

    3072:H3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:XUZYxfM8+YXfq+SOxTxjipQjzk3

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388
rc4.plain
rc4.plain

Targets

    • Target

      99fa0463d43d5d9d282437fa6fd59b122160ff87ca6572aa879afe0454f1bad4

    • Size

      180KB

    • MD5

      bd602dd935b6687c7a31fffd288a2b6a

    • SHA1

      772d8bdee61a315b94b168ff1c675b6202bc88dc

    • SHA256

      99fa0463d43d5d9d282437fa6fd59b122160ff87ca6572aa879afe0454f1bad4

    • SHA512

      52d19ed1a07cf262861d0b114db2c391b02b01439835c0801547a40e3f577bf2fb643facd9881df5b916bcdc4bec0e5a2cf53ccf2bc7afa7aacd92376aefad43

    • SSDEEP

      3072:H3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:XUZYxfM8+YXfq+SOxTxjipQjzk3

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks