dridex | 75696d0d13749306f8dbb5818e181ea2093e166189b480b3c58c4ceb8770d064 | Triage

Submit
Reports

Overview

overview

Static

static

6

05ea32a020...02.dll

windows7_x64

05ea32a020...02.dll

windows10_x64

Sharing

General

Target

05ea32a0200a33650498158c3af44702.dll
Size

236KB
Sample

210121-hg5fmm8bp2
MD5

05ea32a0200a33650498158c3af44702
SHA1

704e9cf59612ddba84fe680f198f2170625cfff4
SHA256

75696d0d13749306f8dbb5818e181ea2093e166189b480b3c58c4ceb8770d064
SHA512

1834d8ee27ce25bc306aa2b4ee89f963980fccf0498187fd427646872e1ab75c422f4aa7de2f98fd325da16c37730c66fcc08bcbd6872a3d40c31d9453b6337f

Score

10^/10

dridex 111 botnet discovery evasion loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

05ea32a0200a33650498158c3af44702.dll

Resource

win7v20201028

dridex 111 botnet discovery evasion loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

05ea32a0200a33650498158c3af44702.dll

Resource

win10v20201028

dridex 111 botnet discovery evasion loader trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

dridex

Botnet

111

C2

77.220.64.40:443

8.4.9.152:3786

185.246.87.202:3098

rc4.plain

rc4.plain

Targets

- Target
  
  05ea32a0200a33650498158c3af44702.dll
- Size
  
  236KB
- MD5
  
  05ea32a0200a33650498158c3af44702
- SHA1
  
  704e9cf59612ddba84fe680f198f2170625cfff4
- SHA256
  
  75696d0d13749306f8dbb5818e181ea2093e166189b480b3c58c4ceb8770d064
- SHA512
  
  1834d8ee27ce25bc306aa2b4ee89f963980fccf0498187fd427646872e1ab75c422f4aa7de2f98fd325da16c37730c66fcc08bcbd6872a3d40c31d9453b6337f
Score

10^/10

dridex 111 botnet discovery evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Blocklisted process makes network request
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

dridex111botnetdiscoveryevasionloadertrojan

behavioral2

dridex111botnetdiscoveryevasionloadertrojan

© 2018-2024

Terms | Privacy