Overview

overview

10

Static

static

6900dd6c3e...51.dll

windows7_x64

10

6900dd6c3e...51.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6900dd6c3e998d11e24f8b693805c24a61b7a3487710aab0c4cc58038e202151

  • Size

    154KB

  • Sample

    210421-v9clazbzre

  • MD5

    a2d2ddc6b0f942e839e1d3b87d2b9ea0

  • SHA1

    dab51db87253815249fbfea6b4ed9185239e568e

  • SHA256

    6900dd6c3e998d11e24f8b693805c24a61b7a3487710aab0c4cc58038e202151

  • SHA512

    8460b0332c77fb9d3237630960bc9ac9f293b69f2aa4b537c8020fa7005135c0228da40ce26354dd42425fbcf63d3f2d6e7a46c1d1538fdf0000f00394053397

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172
rc4.plain
rc4.plain

Targets

    • Target

      6900dd6c3e998d11e24f8b693805c24a61b7a3487710aab0c4cc58038e202151

    • Size

      154KB

    • MD5

      a2d2ddc6b0f942e839e1d3b87d2b9ea0

    • SHA1

      dab51db87253815249fbfea6b4ed9185239e568e

    • SHA256

      6900dd6c3e998d11e24f8b693805c24a61b7a3487710aab0c4cc58038e202151

    • SHA512

      8460b0332c77fb9d3237630960bc9ac9f293b69f2aa4b537c8020fa7005135c0228da40ce26354dd42425fbcf63d3f2d6e7a46c1d1538fdf0000f00394053397

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks