Overview

overview

10

Static

static

37e2b1e297...cb.dll

windows7_x64

10

37e2b1e297...cb.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37e2b1e297331912ca93afd6b72d22ac6a6b80c70014ab9ac080ef7d6fedb4cb

  • Size

    162KB

  • Sample

    210421-pww7x4easx

  • MD5

    3066e777d42b359f2f620a8eac079343

  • SHA1

    12936fa79251375bf9b18288eb895497f50bd88b

  • SHA256

    37e2b1e297331912ca93afd6b72d22ac6a6b80c70014ab9ac080ef7d6fedb4cb

  • SHA512

    f6836415a529b546b72c0b1c80fa9e4876d4cdafedf3b9bafaec480fda8b34149a5fdb294e34c1bdd3013673b4c969410dda71f92073de3103d0f2163d4051ec

Score
10/10
dridex40112botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

107.172.227.10:443

172.93.133.123:2303

108.168.61.147:8172
rc4.plain
rc4.plain

Targets

    • Target

      37e2b1e297331912ca93afd6b72d22ac6a6b80c70014ab9ac080ef7d6fedb4cb

    • Size

      162KB

    • MD5

      3066e777d42b359f2f620a8eac079343

    • SHA1

      12936fa79251375bf9b18288eb895497f50bd88b

    • SHA256

      37e2b1e297331912ca93afd6b72d22ac6a6b80c70014ab9ac080ef7d6fedb4cb

    • SHA512

      f6836415a529b546b72c0b1c80fa9e4876d4cdafedf3b9bafaec480fda8b34149a5fdb294e34c1bdd3013673b4c969410dda71f92073de3103d0f2163d4051ec

    Score
    10/10
    dridex40112botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks