Overview

overview

10

Static

static

8682ac0475...12.dll

windows7_x64

10

8682ac0475...12.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8682ac047528d0c83d3848d985a7d7fd2cb70e18631cb0d6997ac9f917434412

  • Size

    162KB

  • Sample

    210421-drfsywf8nx

  • MD5

    a49b229cb1bd6bddf7c0ad34807341e7

  • SHA1

    ad686122542aa34e2e01eab912cc8880467f3ecf

  • SHA256

    8682ac047528d0c83d3848d985a7d7fd2cb70e18631cb0d6997ac9f917434412

  • SHA512

    300c7ef6e63a6e15fcffda53d9d22c2ee6db121ff493774de87667c2cd87a384273dfd648ee67ffb50c12306a6bf395f14b8c4610bc438b9913c6db35b72328d

Score
10/10
dridex40112botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172
rc4.plain
rc4.plain

Targets

    • Target

      8682ac047528d0c83d3848d985a7d7fd2cb70e18631cb0d6997ac9f917434412

    • Size

      162KB

    • MD5

      a49b229cb1bd6bddf7c0ad34807341e7

    • SHA1

      ad686122542aa34e2e01eab912cc8880467f3ecf

    • SHA256

      8682ac047528d0c83d3848d985a7d7fd2cb70e18631cb0d6997ac9f917434412

    • SHA512

      300c7ef6e63a6e15fcffda53d9d22c2ee6db121ff493774de87667c2cd87a384273dfd648ee67ffb50c12306a6bf395f14b8c4610bc438b9913c6db35b72328d

    Score
    10/10
    dridex40112botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks