Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32cba1b4cfb39d1e1d2892dcb19fa535bdf958e466e2806dd6c1e5c0b8c32ab9

  • Size

    154KB

  • Sample

    210421-9fhwqktfp2

  • MD5

    b76a73c28f3a13425ea9cca5322d5255

  • SHA1

    9d4d449b73407c0ca2c1fa272c83c95f944ef9fc

  • SHA256

    32cba1b4cfb39d1e1d2892dcb19fa535bdf958e466e2806dd6c1e5c0b8c32ab9

  • SHA512

    d1d6e991d540036e6fa8b5b7b4294335b2ef5257fdea34b20733934c6a8497a8c7fad5dccd353186176d85bfa27c4397f2f42a9e22dfe751eb45764af1b16447

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172
rc4.plain
rc4.plain

Targets

    • Target

      32cba1b4cfb39d1e1d2892dcb19fa535bdf958e466e2806dd6c1e5c0b8c32ab9

    • Size

      154KB

    • MD5

      b76a73c28f3a13425ea9cca5322d5255

    • SHA1

      9d4d449b73407c0ca2c1fa272c83c95f944ef9fc

    • SHA256

      32cba1b4cfb39d1e1d2892dcb19fa535bdf958e466e2806dd6c1e5c0b8c32ab9

    • SHA512

      d1d6e991d540036e6fa8b5b7b4294335b2ef5257fdea34b20733934c6a8497a8c7fad5dccd353186176d85bfa27c4397f2f42a9e22dfe751eb45764af1b16447

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks