Overview

overview

10

Static

static

bjsdke.exe

windows7_x64

10

bjsdke.exe

windows10_x64

10

Resubmissions

06/08/2020, 16:19

200806-dwkdpetzc210

15/07/2020, 14:08

200715-86lh36b8se1

Sharing

Copy URL Twitter E-mail

General

  • Target
    bjsdke.exe
  • Size 208KB
  • Sample200806-dwkdpetzc2
  • SHA256 93c97bf3711640d5bd8ff0c2033492b2cea7b81ef2ea0e6f6b2327913e9be9d7
  • MD5 SHA1 SHA512
Score
10/10
dridex40400botnetloader

Malware Config

Extracted

Family

  • dridex

Botnet

  • 40400

C2

  • 59.148.253.194:443

  • 207.180.230.218:3389

  • 2.58.16.87:8443

rc4.plain
rc4.plain

Targets

    • Target
      bjsdke.exe
    • Size 208KB
    • SHA256 93c97bf3711640d5bd8ff0c2033492b2cea7b81ef2ea0e6f6b2327913e9be9d7
    • MD5 SHA1 SHA512
    Score
    10/10
    dridex40400botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Dridex Loader 'dmod' strings

      Detects 'dmod' strings in Dridex loader.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks