Overview

overview

10

Static

static

9

6cd3d9cd0f...fb.exe

windows7_x64

10

6cd3d9cd0f...fb.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6cd3d9cd0f34137c8be76725c2f57181ea8dd36bdda907f1f73634a4ab3e43fb

  • Size

    392KB

  • Sample

    201112-r5j34vwfg6

  • MD5

    3dcb0d833edb13b442f32b5f1264d62d

  • SHA1

    7393ae9ff2c21ce88247f509b96c4af48c82cbd1

  • SHA256

    6cd3d9cd0f34137c8be76725c2f57181ea8dd36bdda907f1f73634a4ab3e43fb

  • SHA512

    842aa6327493f85a1b213b019fd52df953e8f43b771d154e67efd49f060f41d6f531e7ea336f1b105fa17d3b04708fee2e3061beb3eb67ca0810d9425cc1e3b1

Score
10/10
dridex10121botnetcryptoneloaderpacker

Malware Config

Extracted

Family

dridex

Botnet

10121

C2

87.98.218.33:443

54.38.143.246:691

92.38.128.47:3389

159.65.79.173:3886
rc4.plain
rc4.plain

Targets

    • Target

      6cd3d9cd0f34137c8be76725c2f57181ea8dd36bdda907f1f73634a4ab3e43fb

    • Size

      392KB

    • MD5

      3dcb0d833edb13b442f32b5f1264d62d

    • SHA1

      7393ae9ff2c21ce88247f509b96c4af48c82cbd1

    • SHA256

      6cd3d9cd0f34137c8be76725c2f57181ea8dd36bdda907f1f73634a4ab3e43fb

    • SHA512

      842aa6327493f85a1b213b019fd52df953e8f43b771d154e67efd49f060f41d6f531e7ea336f1b105fa17d3b04708fee2e3061beb3eb67ca0810d9425cc1e3b1

    Score
    10/10
    dridex10121botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks