Overview

overview

10

Static

static

839b87bf97...5c.exe

windows7_x64

10

839b87bf97...5c.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    839b87bf97b74fd6a21dcfe99527df63f12ac79885a8c262b66a97dcb621c45c

  • Size

    585KB

  • Sample

    210318-ckwznmds52

  • MD5

    9336058578735944a9a295dee74bc958

  • SHA1

    cb1305f578b3b0988497265d227b8cf98ca7c9ef

  • SHA256

    839b87bf97b74fd6a21dcfe99527df63f12ac79885a8c262b66a97dcb621c45c

  • SHA512

    010eefe4ef7d915b9dd431fe3f321a2c8d4e0b8dd8d263d91efa8d678616cc4f204c0359197cd1e0b8a5a56cd07993791b85f29975f8ab7e26c5084db7647f10

Score
10/10
dridex10111botnetloader

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

188.165.17.91:8443

81.0.236.90:6601
rc4.plain
rc4.plain

Targets

    • Target

      839b87bf97b74fd6a21dcfe99527df63f12ac79885a8c262b66a97dcb621c45c

    • Size

      585KB

    • MD5

      9336058578735944a9a295dee74bc958

    • SHA1

      cb1305f578b3b0988497265d227b8cf98ca7c9ef

    • SHA256

      839b87bf97b74fd6a21dcfe99527df63f12ac79885a8c262b66a97dcb621c45c

    • SHA512

      010eefe4ef7d915b9dd431fe3f321a2c8d4e0b8dd8d263d91efa8d678616cc4f204c0359197cd1e0b8a5a56cd07993791b85f29975f8ab7e26c5084db7647f10

    Score
    10/10
    dridex10111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks