Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1c152af2ff8702691759f2f5974a1ca9b1702aa9cea0ae594dc399bb91dda67

  • Size

    173KB

  • Sample

    210610-1xv43xcshn

  • MD5

    e6bc19b931ea893235568b73eb491256

  • SHA1

    5b2752f72581f5982a1d7f79a1eedbb939e2c1f6

  • SHA256

    a1c152af2ff8702691759f2f5974a1ca9b1702aa9cea0ae594dc399bb91dda67

  • SHA512

    29e664cb0502d48e80524ed9216b7e3705a86b255aa031626f6b013c993c697dcd294e84bf3f56d48f0e93713e3e1fd127bea3fd2d6251471a11332be18e21d1

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

94.23.86.141:13783

62.75.161.205:2303

162.214.188.105:8172
rc4.plain
rc4.plain

Targets

    • Target

      a1c152af2ff8702691759f2f5974a1ca9b1702aa9cea0ae594dc399bb91dda67

    • Size

      173KB

    • MD5

      e6bc19b931ea893235568b73eb491256

    • SHA1

      5b2752f72581f5982a1d7f79a1eedbb939e2c1f6

    • SHA256

      a1c152af2ff8702691759f2f5974a1ca9b1702aa9cea0ae594dc399bb91dda67

    • SHA512

      29e664cb0502d48e80524ed9216b7e3705a86b255aa031626f6b013c993c697dcd294e84bf3f56d48f0e93713e3e1fd127bea3fd2d6251471a11332be18e21d1

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks