Overview

overview

10

Static

static

cb8964d149...xe.dll

windows7_x64

10

cb8964d149...xe.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb8964d149205e3aeba3d7d9872dcefe.exe

  • Size

    370KB

  • Sample

    210121-5k85l3qbhx

  • MD5

    cb8964d149205e3aeba3d7d9872dcefe

  • SHA1

    50c344a61169ebd7d03c4515d625ce4b74466022

  • SHA256

    2bfa88a5c855f4d24139d5d9c556cfbdb05a5a68b23a528ae53226d526dc4e7d

  • SHA512

    69e611394b68d9cc58245b8f41f6fb6475930359594976034566deae6618ad0b3aa4510f33b2da729e0de33f1f62525a2f1ac549fd7b4de7c6d6f206b05cbbf6

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786
rc4.plain
rc4.plain

Targets

    • Target

      cb8964d149205e3aeba3d7d9872dcefe.exe

    • Size

      370KB

    • MD5

      cb8964d149205e3aeba3d7d9872dcefe

    • SHA1

      50c344a61169ebd7d03c4515d625ce4b74466022

    • SHA256

      2bfa88a5c855f4d24139d5d9c556cfbdb05a5a68b23a528ae53226d526dc4e7d

    • SHA512

      69e611394b68d9cc58245b8f41f6fb6475930359594976034566deae6618ad0b3aa4510f33b2da729e0de33f1f62525a2f1ac549fd7b4de7c6d6f206b05cbbf6

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks