Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ef8a9bb29c7e1f99d4691823da85a02343d36ea3fd78710637cc8163999a1b7

  • Size

    174KB

  • Sample

    210610-s8gyakexrs

  • MD5

    608e8776a4a8f9eb5a29260fc69cd695

  • SHA1

    7c839f65d2c4117966e01b84a56f10af5866b078

  • SHA256

    4ef8a9bb29c7e1f99d4691823da85a02343d36ea3fd78710637cc8163999a1b7

  • SHA512

    3e20c8180ef103085cb2cba20074e1921e9fa43419b638a790c582e11e170a5ab6eb13d5e1d3edbd644c321d8cfef68639678c08696f5fa5f4d09cbaba0429e2

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      4ef8a9bb29c7e1f99d4691823da85a02343d36ea3fd78710637cc8163999a1b7

    • Size

      174KB

    • MD5

      608e8776a4a8f9eb5a29260fc69cd695

    • SHA1

      7c839f65d2c4117966e01b84a56f10af5866b078

    • SHA256

      4ef8a9bb29c7e1f99d4691823da85a02343d36ea3fd78710637cc8163999a1b7

    • SHA512

      3e20c8180ef103085cb2cba20074e1921e9fa43419b638a790c582e11e170a5ab6eb13d5e1d3edbd644c321d8cfef68639678c08696f5fa5f4d09cbaba0429e2

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks