Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccf4cfec914dae3b70462a0e6ff655812a87a0c63c69c3c1bb413d41a07c6c01

  • Size

    157KB

  • Sample

    210421-w3rk3rkbce

  • MD5

    8585a3295971c3edacda2a3ae6aa5e6a

  • SHA1

    391c2b67a5f3e4666231bd9e6d29d38271a059a4

  • SHA256

    ccf4cfec914dae3b70462a0e6ff655812a87a0c63c69c3c1bb413d41a07c6c01

  • SHA512

    c844efc30a6e58d555b59e65df3b1acd73129ca79f35db3d0568ccf93c802b940ec25dc54e03a8ca7cbacaa6f8d3f2ec976fa73873edb7201d42b5dc4d27b741

Score
10/10
dridex40112botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

159.8.59.82:443

51.91.156.39:2303

67.196.50.240:8172
rc4.plain
rc4.plain

Targets

    • Target

      ccf4cfec914dae3b70462a0e6ff655812a87a0c63c69c3c1bb413d41a07c6c01

    • Size

      157KB

    • MD5

      8585a3295971c3edacda2a3ae6aa5e6a

    • SHA1

      391c2b67a5f3e4666231bd9e6d29d38271a059a4

    • SHA256

      ccf4cfec914dae3b70462a0e6ff655812a87a0c63c69c3c1bb413d41a07c6c01

    • SHA512

      c844efc30a6e58d555b59e65df3b1acd73129ca79f35db3d0568ccf93c802b940ec25dc54e03a8ca7cbacaa6f8d3f2ec976fa73873edb7201d42b5dc4d27b741

    Score
    10/10
    dridex40112botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks