Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    384c7e95033c401cb22e957b4e6da9e1a69e9420ef4f89a83000e54fa751407e

  • Size

    158KB

  • Sample

    210422-m7v7k4kf1e

  • MD5

    f1ae8bb65fa26aeb9e9cc1b152264110

  • SHA1

    9eb90727f740f088486ea6236be70a238e67fa10

  • SHA256

    384c7e95033c401cb22e957b4e6da9e1a69e9420ef4f89a83000e54fa751407e

  • SHA512

    58488e71bb49423b02a1d6a3a416f09b26ac6d532b76ea75d0d615525c9f4c56f4784d8f8d732cd7a486e3976ebdc6d6a481b557d14a334254793cbb21a920da

Score
10/10
dridex40112botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303
rc4.plain
rc4.plain

Targets

    • Target

      384c7e95033c401cb22e957b4e6da9e1a69e9420ef4f89a83000e54fa751407e

    • Size

      158KB

    • MD5

      f1ae8bb65fa26aeb9e9cc1b152264110

    • SHA1

      9eb90727f740f088486ea6236be70a238e67fa10

    • SHA256

      384c7e95033c401cb22e957b4e6da9e1a69e9420ef4f89a83000e54fa751407e

    • SHA512

      58488e71bb49423b02a1d6a3a416f09b26ac6d532b76ea75d0d615525c9f4c56f4784d8f8d732cd7a486e3976ebdc6d6a481b557d14a334254793cbb21a920da

    Score
    10/10
    dridex40112botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks