Overview

overview

10

Static

static

9

2020-04-14...in.exe

windows7_x64

10

2020-04-14...in.exe

windows10_x64

10

Resubmissions

07-04-2021 12:06

210407-shcgk1rst2 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Dridex500sec.zip

  • Size

    179KB

  • Sample

    210407-shcgk1rst2

  • MD5

    80ed6e162e4470ecc8565916135378e4

  • SHA1

    827d483059eed04d65cd420ef89313cd44f29c94

  • SHA256

    e5b55676eba285d366e2c98d42b0a136ad0464293a07f406f7c7f3cf05dbbe2b

  • SHA512

    68eeaf76f6d3779b9d06513a49da09aef6d88a808071fae46fec345a9a6b5d2004f57f06fbd1b468a3eec1e8c9d77cd3a331761e77d15b05ac1987e8c10a0f88

Score
10/10
dridex10111botnetcryptoneloaderpacker

Malware Config

Extracted

Family

dridex

Botnet

10111

C2

5.45.179.186:443

54.38.143.246:691

159.65.79.173:3886

153.122.13.133:1443
rc4.plain
rc4.plain

Targets

    • Target

      2020-04-14_20-25-01.bin

    • Size

      260KB

    • MD5

      8a988984d3a01e7462c7db414247f3ca

    • SHA1

      95dc47b625c5ae8b165658cc24bcaec136faf479

    • SHA256

      afb5161c6f1903013a24a6fcd3b39210df5025f776ea7c35ebc8911fef8e1cca

    • SHA512

      b59b64af284f697da946df3b09f8e9bd7e84bc924c07e33db1b07d470724e3bf437b2907bd226ee249afe84f646948d71613c782ffdadee2af3c02021ad24274

    Score
    10/10
    dridex10111botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks