Overview

overview

10

Static

static

sample.exe

windows7_x64

10

sample.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d7fd7d58f0bbd4318dfad6767b1046a25f9fc2915ca41b4763be74da56683a5.bin.gz

  • Size

    196KB

  • Sample

    200901-cvv22ym9wa

  • MD5

    575715044efe6a8901d95a7014e72e80

  • SHA1

    bb7cad6f3747261835a3e8be8e3a99deebb40a2c

  • SHA256

    13cd4a848d4d63aeddc6931098866c7e42e436c1f60596a54a257dcc5ca8a1f6

  • SHA512

    6523f943b87388627c2c372a7e391d13e9c0a29773af7adbd9cd5f265326a1c2302e387cb57abe908c14184a7b80081f3df522d492bdedf5763ed5271dfa6870

Score
10/10
dridex40400botnetloader

Malware Config

Extracted

Family

dridex

Botnet

40400

C2

51.15.7.145:443

198.27.69.201:4643

198.20.228.10:3389

192.99.41.136:981
rc4.plain
rc4.plain

Targets

    • Target

      sample

    • Size

      196KB

    • MD5

      118a0f8b8692456e142d08515c539a63

    • SHA1

      5a7c485316737b448ce8274e9239ee4dc767b07b

    • SHA256

      4d7fd7d58f0bbd4318dfad6767b1046a25f9fc2915ca41b4763be74da56683a5

    • SHA512

      66de6c538b1f0330d74a52456d5d6dcbfe22128004b2756ef6b7c763b8bfe9e1c42102ad4f32353f0fe6cc54dd13c9cbaa35d34f70f562b75bd6e58e9c1da2d3

    Score
    10/10
    dridex40400botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks