Analysis
-
max time kernel
91s -
max time network
13s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
12-11-2020 14:12
General
-
Target
6cd3d9cd0f34137c8be76725c2f57181ea8dd36bdda907f1f73634a4ab3e43fb.exe
-
Size
392KB
-
MD5
3dcb0d833edb13b442f32b5f1264d62d
-
SHA1
7393ae9ff2c21ce88247f509b96c4af48c82cbd1
-
SHA256
6cd3d9cd0f34137c8be76725c2f57181ea8dd36bdda907f1f73634a4ab3e43fb
-
SHA512
842aa6327493f85a1b213b019fd52df953e8f43b771d154e67efd49f060f41d6f531e7ea336f1b105fa17d3b04708fee2e3061beb3eb67ca0810d9425cc1e3b1
Score
10/10
Malware Config
Extracted
Family
dridex
Botnet
10121
C2
87.98.218.33:443
54.38.143.246:691
92.38.128.47:3389
159.65.79.173:3886
rc4.plain
rc4.plain
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Dridex Loader 1 IoCs
Detects Dridex both x86 and x64 loader in memory.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6cd3d9cd0f34137c8be76725c2f57181ea8dd36bdda907f1f73634a4ab3e43fb.exe"C:\Users\Admin\AppData\Local\Temp\6cd3d9cd0f34137c8be76725c2f57181ea8dd36bdda907f1f73634a4ab3e43fb.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1824-0-0x0000000000400000-0x000000000042D000-memory.dmpFilesize
180KB