Overview

overview

10

Static

static

3350a3ee61...17.dll

windows7_x64

10

3350a3ee61...17.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3350a3ee61efe8518970affb5cbaebc982973aac56296a7b70aa2d6f56680617

  • Size

    158KB

  • Sample

    210421-4cv3ytfkrn

  • MD5

    0c65ccd0028963aaddb2180a7bb6acba

  • SHA1

    507870b3fc9dec3833c554481b4d06c2b6cae6ab

  • SHA256

    3350a3ee61efe8518970affb5cbaebc982973aac56296a7b70aa2d6f56680617

  • SHA512

    3c1af252a3f897804e0a21d15fd1eeee54ae20044de2e30b600e34217f6730e81e34b22206e09369c247d593a0cc29b46b12fe9e2ab8abe0212f1ddc0bcac575

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      3350a3ee61efe8518970affb5cbaebc982973aac56296a7b70aa2d6f56680617

    • Size

      158KB

    • MD5

      0c65ccd0028963aaddb2180a7bb6acba

    • SHA1

      507870b3fc9dec3833c554481b4d06c2b6cae6ab

    • SHA256

      3350a3ee61efe8518970affb5cbaebc982973aac56296a7b70aa2d6f56680617

    • SHA512

      3c1af252a3f897804e0a21d15fd1eeee54ae20044de2e30b600e34217f6730e81e34b22206e09369c247d593a0cc29b46b12fe9e2ab8abe0212f1ddc0bcac575

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks