Overview

overview

10

Static

static

a1a640a41b...d0.dll

windows7_x64

10

a1a640a41b...d0.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1a640a41b403bd5989a6aff916e1a4306dbc24c96704af36b141effc896c3d0

  • Size

    158KB

  • Sample

    210421-nkxaq65cxj

  • MD5

    b1ede1ee47c7f1a23a41670d2569eab2

  • SHA1

    51f7343ce50820a0576ad8cae69400a06338b142

  • SHA256

    a1a640a41b403bd5989a6aff916e1a4306dbc24c96704af36b141effc896c3d0

  • SHA512

    cd3959a59df47949841b2d89692ee7600e58d36effab55eea32f823c32f19e6b0608e27c158f11de6a2a6f47a4536e2be147fc473a63aeaceaff106ae9d2d4e5

Score
10/10
dridex40112botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      a1a640a41b403bd5989a6aff916e1a4306dbc24c96704af36b141effc896c3d0

    • Size

      158KB

    • MD5

      b1ede1ee47c7f1a23a41670d2569eab2

    • SHA1

      51f7343ce50820a0576ad8cae69400a06338b142

    • SHA256

      a1a640a41b403bd5989a6aff916e1a4306dbc24c96704af36b141effc896c3d0

    • SHA512

      cd3959a59df47949841b2d89692ee7600e58d36effab55eea32f823c32f19e6b0608e27c158f11de6a2a6f47a4536e2be147fc473a63aeaceaff106ae9d2d4e5

    Score
    10/10
    dridex40112botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks