Dridex500sec.zip

General
Target

Dridex500sec.zip

Size

179KB

Sample

210407-shcgk1rst2

Score
10 /10
MD5

80ed6e162e4470ecc8565916135378e4

SHA1

827d483059eed04d65cd420ef89313cd44f29c94

SHA256

e5b55676eba285d366e2c98d42b0a136ad0464293a07f406f7c7f3cf05dbbe2b

SHA512

68eeaf76f6d3779b9d06513a49da09aef6d88a808071fae46fec345a9a6b5d2004f57f06fbd1b468a3eec1e8c9d77cd3a331761e77d15b05ac1987e8c10a0f88

Malware Config

Extracted

Family dridex
Botnet 10111
C2

5.45.179.186:443

54.38.143.246:691

159.65.79.173:3886

153.122.13.133:1443

rc4.plain
rc4.plain
Targets
Target

2020-04-14_20-25-01.bin

MD5

8a988984d3a01e7462c7db414247f3ca

Filesize

260KB

Score
10 /10
SHA1

95dc47b625c5ae8b165658cc24bcaec136faf479

SHA256

afb5161c6f1903013a24a6fcd3b39210df5025f776ea7c35ebc8911fef8e1cca

SHA512

b59b64af284f697da946df3b09f8e9bd7e84bc924c07e33db1b07d470724e3bf437b2907bd226ee249afe84f646948d71613c782ffdadee2af3c02021ad24274

Tags

Signatures

  • Dridex

    Description

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    Tags

  • Dridex Loader

    Description

    Detects Dridex both x86 and x64 loader in memory.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          9/10

                          behavioral1

                          10/10

                          behavioral2

                          10/10