Overview

overview

10

Static

static

3

285409cabe...80.dll

windows7-x64

10

285409cabe...80.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    285409cabe328b8a320714e78457637a4eee07998e7b83c0a271ef4e285b6280

  • Size

    180KB

  • Sample

    240423-ph1jrsgb79

  • MD5

    0a407ef06bd4741524225b58d8507319

  • SHA1

    b20713c68f06320a9190d16af0956ee75a716edf

  • SHA256

    285409cabe328b8a320714e78457637a4eee07998e7b83c0a271ef4e285b6280

  • SHA512

    94f44451670583b70fcc21d4afddf62455314e6116bdff6671920ab239226b72859149d6533a2b3c907ffb10c9fa8e92e4adf8a258b790981a8c57d0e18d440b

  • SSDEEP

    3072:C3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:WUZYxfM8+YXfq+SOxTxjipQjzk3

Score
10/10
dridex111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

111

C2

94.126.8.2:443

81.2.235.131:1688

178.63.156.139:3388
rc4.plain
rc4.plain

Targets

    • Target

      285409cabe328b8a320714e78457637a4eee07998e7b83c0a271ef4e285b6280

    • Size

      180KB

    • MD5

      0a407ef06bd4741524225b58d8507319

    • SHA1

      b20713c68f06320a9190d16af0956ee75a716edf

    • SHA256

      285409cabe328b8a320714e78457637a4eee07998e7b83c0a271ef4e285b6280

    • SHA512

      94f44451670583b70fcc21d4afddf62455314e6116bdff6671920ab239226b72859149d6533a2b3c907ffb10c9fa8e92e4adf8a258b790981a8c57d0e18d440b

    • SSDEEP

      3072:C3U+o/fwAUfM8+NmXhjlAZ+SWlxT5H3zipQIoZeErkxUNBG0:WUZYxfM8+YXfq+SOxTxjipQjzk3

    Score
    10/10
    dridex111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks