Overview

overview

10

Static

static

4fb619606a...fa.dll

windows7_x64

10

4fb619606a...fa.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4fb619606af35bd82f95377cb7c1ab6eb0f92718d890156c83cb8d96635b10fa

  • Size

    157KB

  • Sample

    210421-crr6xqyata

  • MD5

    3d2f719329a70824a3aea1608d116587

  • SHA1

    eddc3ef8669b04580570cbd9ba4f4f6091519d09

  • SHA256

    4fb619606af35bd82f95377cb7c1ab6eb0f92718d890156c83cb8d96635b10fa

  • SHA512

    d07dbb580a6e7bcf88347a5e3494d12a21838ffb8cee690674b492f97e3b524529b71d315163ef34877d6ddcaa2c857fdd831f84a0b45c410f3c5985686ad628

Score
10/10
dridex40112botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172
rc4.plain
rc4.plain

Targets

    • Target

      4fb619606af35bd82f95377cb7c1ab6eb0f92718d890156c83cb8d96635b10fa

    • Size

      157KB

    • MD5

      3d2f719329a70824a3aea1608d116587

    • SHA1

      eddc3ef8669b04580570cbd9ba4f4f6091519d09

    • SHA256

      4fb619606af35bd82f95377cb7c1ab6eb0f92718d890156c83cb8d96635b10fa

    • SHA512

      d07dbb580a6e7bcf88347a5e3494d12a21838ffb8cee690674b492f97e3b524529b71d315163ef34877d6ddcaa2c857fdd831f84a0b45c410f3c5985686ad628

    Score
    10/10
    dridex40112botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks