Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0249e80b90928168950f361a0985c8e92bda3ae8221b8b38863d214aed20a5d

  • Size

    154KB

  • Sample

    210421-3ajm5849ha

  • MD5

    8deb6c19a82e1d4a754effd2d7f02832

  • SHA1

    d82e6a542805c31adcadb1d09d3ada3939f317da

  • SHA256

    c0249e80b90928168950f361a0985c8e92bda3ae8221b8b38863d214aed20a5d

  • SHA512

    b1060c224d77ca1c1ab03c7b7b5aff0a4c0a86b2f5979ae3e37f3e1509a9cfb326db5285104326da56538812f707e4ff230dc1a76d7331c73b3c0ff167d2d7c7

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172
rc4.plain
rc4.plain

Targets

    • Target

      c0249e80b90928168950f361a0985c8e92bda3ae8221b8b38863d214aed20a5d

    • Size

      154KB

    • MD5

      8deb6c19a82e1d4a754effd2d7f02832

    • SHA1

      d82e6a542805c31adcadb1d09d3ada3939f317da

    • SHA256

      c0249e80b90928168950f361a0985c8e92bda3ae8221b8b38863d214aed20a5d

    • SHA512

      b1060c224d77ca1c1ab03c7b7b5aff0a4c0a86b2f5979ae3e37f3e1509a9cfb326db5285104326da56538812f707e4ff230dc1a76d7331c73b3c0ff167d2d7c7

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks