Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    070eeffdf4fd2d90797fd26f2b7a4a9acf3839455e406a61f17ea526ba0e3f13

  • Size

    174KB

  • Sample

    210610-pythw6tlte

  • MD5

    c9a40b45ef91d95e9d8f24ba0026c207

  • SHA1

    dba83ec746cb868d38a38b54cf488d3b45970068

  • SHA256

    070eeffdf4fd2d90797fd26f2b7a4a9acf3839455e406a61f17ea526ba0e3f13

  • SHA512

    19505ba3377ccbabffef0925c8492422fc746f0c6c7231dbd9f8d14fff7d2bc7549e96751b0655b2e6d6cfd12f053e4d8ca25cddefea36eecd19e69326f09af7

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      070eeffdf4fd2d90797fd26f2b7a4a9acf3839455e406a61f17ea526ba0e3f13

    • Size

      174KB

    • MD5

      c9a40b45ef91d95e9d8f24ba0026c207

    • SHA1

      dba83ec746cb868d38a38b54cf488d3b45970068

    • SHA256

      070eeffdf4fd2d90797fd26f2b7a4a9acf3839455e406a61f17ea526ba0e3f13

    • SHA512

      19505ba3377ccbabffef0925c8492422fc746f0c6c7231dbd9f8d14fff7d2bc7549e96751b0655b2e6d6cfd12f053e4d8ca25cddefea36eecd19e69326f09af7

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks