Overview

overview

10

Static

static

3

cfd1b7649e...0N.dll

windows7-x64

10

cfd1b7649e...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfd1b7649ec36025ff83e2e9d095d5d0N

  • Size

    188KB

  • Sample

    240909-dp1ybs1fnb

  • MD5

    cfd1b7649ec36025ff83e2e9d095d5d0

  • SHA1

    a8b8fea0ddc5f87b53d26a4cee605264055a0022

  • SHA256

    e90ceaf051bf1651a4c6caa2e9c63df9ff218939018858e67a79fec6aaa6ed3d

  • SHA512

    f5bc124432123512cabc1c36a5f9a54cdc36c844cf1297d83705437bb47f5528b6ae28244ea78ab22474a5cd3504816f977988516628239b206d62d22b37ae86

  • SSDEEP

    3072:FteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:Bq7fYIHBZkTB6DWruUCOwjt

Score
10/10
dridex22201botnetdiscoveryloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.87.173.60:443

45.32.243.209:8116

207.180.208.54:4664
rc4.plain
rc4.plain

Targets

    • Target

      cfd1b7649ec36025ff83e2e9d095d5d0N

    • Size

      188KB

    • MD5

      cfd1b7649ec36025ff83e2e9d095d5d0

    • SHA1

      a8b8fea0ddc5f87b53d26a4cee605264055a0022

    • SHA256

      e90ceaf051bf1651a4c6caa2e9c63df9ff218939018858e67a79fec6aaa6ed3d

    • SHA512

      f5bc124432123512cabc1c36a5f9a54cdc36c844cf1297d83705437bb47f5528b6ae28244ea78ab22474a5cd3504816f977988516628239b206d62d22b37ae86

    • SSDEEP

      3072:FteMq7hp/YIzA6BZvlWnTDN2GL9L8NLXWruiuUCzTOwwc0cIz29qM:Bq7fYIHBZkTB6DWruUCOwjt

    Score
    10/10
    dridex22201botnetdiscoveryloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks