Analysis
-
max time kernel
88s -
max time network
12s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
14-12-2020 15:41
General
-
Target
999ad6100cddc7a59952dc93da44e2a5.exe
-
Size
437KB
-
MD5
999ad6100cddc7a59952dc93da44e2a5
-
SHA1
7e3ffaaa4ed8e03a4ea0de28e68a7db65f5ea0ea
-
SHA256
c92bd10d10a5a6d2fe16c3617822f0cab83300b618ebe6e1e9e8175f1b324305
-
SHA512
17e35c1d9d8a92cfb71b80cd0fe87bdda0c9ec6ceab50678c2b7113f69b5a7ed70134456ecd9772fabfa4ed4e604e5f97fd781d609dc03018e9f9149be9693c9
Score
10/10
Malware Config
Extracted
Family
dridex
Botnet
10121
C2
87.98.218.33:443
54.38.143.246:691
159.65.79.173:3886
153.122.13.133:1443
rc4.plain
rc4.plain
Signatures
-
Dridex
Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
-
Dridex Loader 1 IoCs
Detects Dridex both x86 and x64 loader in memory.
Processes
-
C:\Users\Admin\AppData\Local\Temp\999ad6100cddc7a59952dc93da44e2a5.exe"C:\Users\Admin\AppData\Local\Temp\999ad6100cddc7a59952dc93da44e2a5.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/884-2-0x0000000000400000-0x000000000042B000-memory.dmpFilesize
172KB