Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a017652f5be8f1059fbda35a045bce31d6ae18e46921f1a1cdfaee83c4204ab

  • Size

    174KB

  • Sample

    210610-myffb8paye

  • MD5

    31e492a7d47b3110d1e26ef19f30d69f

  • SHA1

    884be27bb3951abad0e05a14f5cb65d440befbb5

  • SHA256

    6a017652f5be8f1059fbda35a045bce31d6ae18e46921f1a1cdfaee83c4204ab

  • SHA512

    edc471e32dfc9f7d36f1f3b5c59458126db9aa88928d2147bb3c257967b65a214596b9762255b52816778b9456c806f527d288d5cc53d85d83ba8448c18f81b2

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      6a017652f5be8f1059fbda35a045bce31d6ae18e46921f1a1cdfaee83c4204ab

    • Size

      174KB

    • MD5

      31e492a7d47b3110d1e26ef19f30d69f

    • SHA1

      884be27bb3951abad0e05a14f5cb65d440befbb5

    • SHA256

      6a017652f5be8f1059fbda35a045bce31d6ae18e46921f1a1cdfaee83c4204ab

    • SHA512

      edc471e32dfc9f7d36f1f3b5c59458126db9aa88928d2147bb3c257967b65a214596b9762255b52816778b9456c806f527d288d5cc53d85d83ba8448c18f81b2

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks