Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d1589f4bf4c91227c1c640408ed057737d6b1918a75cf78f8ff514ec9dd1396

  • Size

    157KB

  • Sample

    210421-5dhngqs6lx

  • MD5

    881e454d174259f6e9222310094440ae

  • SHA1

    f8c2430232788563f6a3d545c9eef6ee186f4754

  • SHA256

    5d1589f4bf4c91227c1c640408ed057737d6b1918a75cf78f8ff514ec9dd1396

  • SHA512

    e5c30a6a9b63a2018be366578fd93851982034bb9042412416a104c9f3479c4173d4954a0508275172a7f7994767fa57626ae19cadc2ce160921ceae1f9c31a5

Score
10/10
dridex40112botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172
rc4.plain
rc4.plain

Targets

    • Target

      5d1589f4bf4c91227c1c640408ed057737d6b1918a75cf78f8ff514ec9dd1396

    • Size

      157KB

    • MD5

      881e454d174259f6e9222310094440ae

    • SHA1

      f8c2430232788563f6a3d545c9eef6ee186f4754

    • SHA256

      5d1589f4bf4c91227c1c640408ed057737d6b1918a75cf78f8ff514ec9dd1396

    • SHA512

      e5c30a6a9b63a2018be366578fd93851982034bb9042412416a104c9f3479c4173d4954a0508275172a7f7994767fa57626ae19cadc2ce160921ceae1f9c31a5

    Score
    10/10
    dridex40112botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks