Overview

overview

10

Static

static

3

5f2cd39add...06.dll

windows7-x64

10

5f2cd39add...06.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f2cd39adddbfa124c738a694e7ec4aaf02edfc28d0dbcc66571220552df3706

  • Size

    180KB

  • Sample

    240423-h66blaed9y

  • MD5

    84ba7b24631e38955aec1af2d5b0244a

  • SHA1

    9f239c1b744a246579c8901e6a4d9f00ee3fd3ab

  • SHA256

    5f2cd39adddbfa124c738a694e7ec4aaf02edfc28d0dbcc66571220552df3706

  • SHA512

    c5ceb2c8811b6535b88543ad6c260751d5810c67f8f00da772807e34db906d52c8661708ea9f32bb5e720864c54cd69f9e00fb959ee1696b760f8b27c0356433

  • SSDEEP

    3072:A3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:UUZYxfM8+YXfq+SOxTxjipQjzk3

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388
rc4.plain
rc4.plain

Targets

    • Target

      5f2cd39adddbfa124c738a694e7ec4aaf02edfc28d0dbcc66571220552df3706

    • Size

      180KB

    • MD5

      84ba7b24631e38955aec1af2d5b0244a

    • SHA1

      9f239c1b744a246579c8901e6a4d9f00ee3fd3ab

    • SHA256

      5f2cd39adddbfa124c738a694e7ec4aaf02edfc28d0dbcc66571220552df3706

    • SHA512

      c5ceb2c8811b6535b88543ad6c260751d5810c67f8f00da772807e34db906d52c8661708ea9f32bb5e720864c54cd69f9e00fb959ee1696b760f8b27c0356433

    • SSDEEP

      3072:A3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:UUZYxfM8+YXfq+SOxTxjipQjzk3

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks