Overview

overview

10

Static

static

c46eb850f9...b4.dll

windows7_x64

10

c46eb850f9...b4.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c46eb850f9920336b99f11049f6c3c018a08ccdb75d3fb5ee7c1ecc08fc779b4

  • Size

    196KB

  • Sample

    210304-g544z9pqta

  • MD5

    9757f74735004a2338226799a7fefe25

  • SHA1

    57b95c655bd8a3cba07fc10dfeaded2f2456d9b5

  • SHA256

    c46eb850f9920336b99f11049f6c3c018a08ccdb75d3fb5ee7c1ecc08fc779b4

  • SHA512

    d4a2c0ae2abcd41dd56959a7ffd2f62eb45f4ef725ee37d1d1a9d351fcd67c9ec20e4b2976591d657afabe9000e16991b916ede2cf3965e3d6aa09569163b6f6

Score
10/10
dridex111botnetdiscoveryevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

111

C2

37.247.35.132:443

50.243.30.51:6601

162.241.204.234:6516
rc4.plain
rc4.plain

Targets

    • Target

      c46eb850f9920336b99f11049f6c3c018a08ccdb75d3fb5ee7c1ecc08fc779b4

    • Size

      196KB

    • MD5

      9757f74735004a2338226799a7fefe25

    • SHA1

      57b95c655bd8a3cba07fc10dfeaded2f2456d9b5

    • SHA256

      c46eb850f9920336b99f11049f6c3c018a08ccdb75d3fb5ee7c1ecc08fc779b4

    • SHA512

      d4a2c0ae2abcd41dd56959a7ffd2f62eb45f4ef725ee37d1d1a9d351fcd67c9ec20e4b2976591d657afabe9000e16991b916ede2cf3965e3d6aa09569163b6f6

    Score
    10/10
    dridex111botnetdiscoveryevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks