dridex | bcd661ee773a308f89d3960da729405954b8280e56c0eb69eaa696e28071a960 | Triage

Submit
Reports

Overview

overview

Static

static

bcd661ee77...60.dll

windows7_x64

bcd661ee77...60.dll

windows10_x64

Sharing

General

Target

bcd661ee773a308f89d3960da729405954b8280e56c0eb69eaa696e28071a960
Size

188KB
Sample

210303-yy2mkbjem2
MD5

1557ebdb491ad6a8b7c42d086059eb7d
SHA1

ffef1a101fd7edc56cbc06549c3ff39e9301fbea
SHA256

bcd661ee773a308f89d3960da729405954b8280e56c0eb69eaa696e28071a960
SHA512

16899209a8b017dba296386663ffae03c62b6338ced203bb75949ba7ce9615b2fde2f5f75c14869b9b632caf9ebc7dceab38cdd7253d38fe019b00ce077863be

Score

10^/10

dridex 111 botnet discovery evasion loader trojan

Static task

static1

Behavioral task

behavioral1

Sample

bcd661ee773a308f89d3960da729405954b8280e56c0eb69eaa696e28071a960.dll

Resource

win7v20201028

dridex 111 botnet discovery evasion loader trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

bcd661ee773a308f89d3960da729405954b8280e56c0eb69eaa696e28071a960.dll

Resource

win10v20201028

dridex 111 botnet discovery evasion loader trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

dridex

Botnet

111

C2

116.251.211.158:443

216.10.242.142:6601

37.247.35.137:6601

rc4.plain

rc4.plain

Targets

- Target
  
  bcd661ee773a308f89d3960da729405954b8280e56c0eb69eaa696e28071a960
- Size
  
  188KB
- MD5
  
  1557ebdb491ad6a8b7c42d086059eb7d
- SHA1
  
  ffef1a101fd7edc56cbc06549c3ff39e9301fbea
- SHA256
  
  bcd661ee773a308f89d3960da729405954b8280e56c0eb69eaa696e28071a960
- SHA512
  
  16899209a8b017dba296386663ffae03c62b6338ced203bb75949ba7ce9615b2fde2f5f75c14869b9b632caf9ebc7dceab38cdd7253d38fe019b00ce077863be
Score

10^/10

dridex 111 botnet discovery evasion loader trojan
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
- Blocklisted process makes network request
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

dridex111botnetdiscoveryevasionloadertrojan

behavioral2

dridex111botnetdiscoveryevasionloadertrojan

© 2018-2024

Terms | Privacy