Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    112fa5041b7d771c41971536137042d725985e5c0131f4d4e1823e0347784359

  • Size

    174KB

  • Sample

    210610-btkqbhc282

  • MD5

    94e5e0a1a3b160d1662370687183cd12

  • SHA1

    de240acd957c85a041f8a938663700b5561b97d9

  • SHA256

    112fa5041b7d771c41971536137042d725985e5c0131f4d4e1823e0347784359

  • SHA512

    56a3b94025846711439ca2b6e863b0aaec75fe8b11f406fe587aae2d47ea4bc73a12bf105d671163532a0a42d1b47eec1326e5d2ba23da4e9f185489b269e061

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      112fa5041b7d771c41971536137042d725985e5c0131f4d4e1823e0347784359

    • Size

      174KB

    • MD5

      94e5e0a1a3b160d1662370687183cd12

    • SHA1

      de240acd957c85a041f8a938663700b5561b97d9

    • SHA256

      112fa5041b7d771c41971536137042d725985e5c0131f4d4e1823e0347784359

    • SHA512

      56a3b94025846711439ca2b6e863b0aaec75fe8b11f406fe587aae2d47ea4bc73a12bf105d671163532a0a42d1b47eec1326e5d2ba23da4e9f185489b269e061

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks