Overview

overview

10

Static

static

fa54a3dd31...50.dll

windows7_x64

10

fa54a3dd31...50.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa54a3dd3130decdb3500c4a954212294013eaad6fef272962969bd79b026150

  • Size

    162KB

  • Sample

    210421-njj3394na2

  • MD5

    8e68dc3363ccb0130183c2fa601924c1

  • SHA1

    a5af80fdf359ea019886435e7e8df8f1fe8291cf

  • SHA256

    fa54a3dd3130decdb3500c4a954212294013eaad6fef272962969bd79b026150

  • SHA512

    b183da0cb9d5b90f6dd10cb71205f4d517320199619a49e1a73a9e690263c6ec3c00362c8595b0434255a6051a2eba62af867b27ee41b84f0486917f3273009c

Score
10/10
dridex40112botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172
rc4.plain
rc4.plain

Targets

    • Target

      fa54a3dd3130decdb3500c4a954212294013eaad6fef272962969bd79b026150

    • Size

      162KB

    • MD5

      8e68dc3363ccb0130183c2fa601924c1

    • SHA1

      a5af80fdf359ea019886435e7e8df8f1fe8291cf

    • SHA256

      fa54a3dd3130decdb3500c4a954212294013eaad6fef272962969bd79b026150

    • SHA512

      b183da0cb9d5b90f6dd10cb71205f4d517320199619a49e1a73a9e690263c6ec3c00362c8595b0434255a6051a2eba62af867b27ee41b84f0486917f3273009c

    Score
    10/10
    dridex40112botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks