Overview

overview

10

Static

static

3

c60e6381e0...0N.dll

windows7-x64

10

c60e6381e0...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c60e6381e0838118216a041c275ce6c0N.exe

  • Size

    188KB

  • Sample

    240904-1tqz9aybld

  • MD5

    c60e6381e0838118216a041c275ce6c0

  • SHA1

    c3c024150cffcd12b9cf31147a57b1a4b29bcd87

  • SHA256

    2eb4f8a3f1d1f9643e80a84b1872123a512ee3a91cb572f1744fb35cfb5a1262

  • SHA512

    0f89536b07343703d3f2be6ce5c3fc5f09ac09888c6ff442a93a25d5742a6fe6941e18615644ee236e1b9387e61a56afa070e9cfbc27bc54198809826a00eb4b

  • SSDEEP

    3072:RteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzv9qM:9q7fYIHBZkTB6DWruUCOwjt

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664
rc4.plain
rc4.plain

Targets

    • Target

      c60e6381e0838118216a041c275ce6c0N.exe

    • Size

      188KB

    • MD5

      c60e6381e0838118216a041c275ce6c0

    • SHA1

      c3c024150cffcd12b9cf31147a57b1a4b29bcd87

    • SHA256

      2eb4f8a3f1d1f9643e80a84b1872123a512ee3a91cb572f1744fb35cfb5a1262

    • SHA512

      0f89536b07343703d3f2be6ce5c3fc5f09ac09888c6ff442a93a25d5742a6fe6941e18615644ee236e1b9387e61a56afa070e9cfbc27bc54198809826a00eb4b

    • SSDEEP

      3072:RteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIzv9qM:9q7fYIHBZkTB6DWruUCOwjt

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks