Overview

overview

10

Static

static

SecuriteIn...64.dll

windows7_x64

10

SecuriteIn...64.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.Dridex.735.27326.7964

  • Size

    848KB

  • Sample

    210121-6fh2kc3r62

  • MD5

    4b82e27b9770b5354f7b7b254a6c7824

  • SHA1

    30e3892e4da3d5c1bdf2d8fa5cc2772de13af9ab

  • SHA256

    13b368bb54cf3314630e9d78bf5e4f2c1e104d3929424c8f413155d916091899

  • SHA512

    f3859b647bb180f58125b36c3f6b6fcc11041e7b9ff1c149a736356a79830be82d456a6f54381f5fc2eb5e9608e9e16c9706de949be9b6e2769cefe6a14cc790

Score
10/10
dridex10444botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10444

C2

194.225.58.214:443

211.110.44.63:5353

69.164.207.140:3388

198.57.200.100:3786
rc4.plain
rc4.plain

Targets

    • Target

      SecuriteInfo.com.Trojan.Dridex.735.27326.7964

    • Size

      848KB

    • MD5

      4b82e27b9770b5354f7b7b254a6c7824

    • SHA1

      30e3892e4da3d5c1bdf2d8fa5cc2772de13af9ab

    • SHA256

      13b368bb54cf3314630e9d78bf5e4f2c1e104d3929424c8f413155d916091899

    • SHA512

      f3859b647bb180f58125b36c3f6b6fcc11041e7b9ff1c149a736356a79830be82d456a6f54381f5fc2eb5e9608e9e16c9706de949be9b6e2769cefe6a14cc790

    Score
    10/10
    dridex10444botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks