Overview

overview

10

Static

static

464f4d69bf...c4.dll

windows7_x64

10

464f4d69bf...c4.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    464f4d69bf6ad3039ad7a0441a9c87fc8c92716472c0e2e44e912a5eca62d8c4

  • Size

    161KB

  • Sample

    210421-h7evvtdmle

  • MD5

    9c399d791cc4f14e084e07ea10e3445a

  • SHA1

    29de93b44746ab60bffacb672d7cf5bbc9d21948

  • SHA256

    464f4d69bf6ad3039ad7a0441a9c87fc8c92716472c0e2e44e912a5eca62d8c4

  • SHA512

    c39dcadee48ded6d1c8c6133f93daa293cfb923dd65b321662722f52ab222292017c3f831c096b2f74fbb6608016cb7b19f9c2553604216bf43c45908e05a380

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172
rc4.plain
rc4.plain

Targets

    • Target

      464f4d69bf6ad3039ad7a0441a9c87fc8c92716472c0e2e44e912a5eca62d8c4

    • Size

      161KB

    • MD5

      9c399d791cc4f14e084e07ea10e3445a

    • SHA1

      29de93b44746ab60bffacb672d7cf5bbc9d21948

    • SHA256

      464f4d69bf6ad3039ad7a0441a9c87fc8c92716472c0e2e44e912a5eca62d8c4

    • SHA512

      c39dcadee48ded6d1c8c6133f93daa293cfb923dd65b321662722f52ab222292017c3f831c096b2f74fbb6608016cb7b19f9c2553604216bf43c45908e05a380

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks