Overview

overview

10

Static

static

9

ea13d342c6...5b.exe

windows7_x64

10

ea13d342c6...5b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea13d342c6312efb1c3eee4a042eec8c374351c788d459313793cf839e3ebf5b

  • Size

    371KB

  • Sample

    210517-6413eds7w6

  • MD5

    96733f96b86724fb6ee902d57a5c96c9

  • SHA1

    9ceb3c43782e187a221fd53c6939f550eed0f522

  • SHA256

    ea13d342c6312efb1c3eee4a042eec8c374351c788d459313793cf839e3ebf5b

  • SHA512

    060a3df8cc915c3411268b3532d9e8277ad486d388d4cafae1f2ef86a43b697192dfea1dc400ad905478690aa0549c3717adaa8b3236186783cd9c025888cd20

Score
10/10
dridexbotnetcryptoneloaderpacker

Malware Config

Extracted

Family

dridex

C2

164.132.75.109:443

89.22.113.245:691

81.2.235.155:8443

212.53.140.12:3389

Targets

    • Target

      ea13d342c6312efb1c3eee4a042eec8c374351c788d459313793cf839e3ebf5b

    • Size

      371KB

    • MD5

      96733f96b86724fb6ee902d57a5c96c9

    • SHA1

      9ceb3c43782e187a221fd53c6939f550eed0f522

    • SHA256

      ea13d342c6312efb1c3eee4a042eec8c374351c788d459313793cf839e3ebf5b

    • SHA512

      060a3df8cc915c3411268b3532d9e8277ad486d388d4cafae1f2ef86a43b697192dfea1dc400ad905478690aa0549c3717adaa8b3236186783cd9c025888cd20

    Score
    10/10
    dridexbotnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks