Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bbd1c9cd82093ec083a4cb914ebfd934cde9bd90629457bf8a18484430c5a48

  • Size

    174KB

  • Sample

    210611-1hg821zmcj

  • MD5

    3fb410d92ad4598149fb3628018a63a7

  • SHA1

    4117a5b64ebebad09d5500c5f80d6ce82eaf8101

  • SHA256

    3bbd1c9cd82093ec083a4cb914ebfd934cde9bd90629457bf8a18484430c5a48

  • SHA512

    796c863e4966cc0dde553054c17caa6b23d6ed2a0ba6498597545a9fd14926ba253a0cabe8901d21da78e2d3f84c390e2ef1a5d2c5dcd07d095cb3aa0157e589

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      3bbd1c9cd82093ec083a4cb914ebfd934cde9bd90629457bf8a18484430c5a48

    • Size

      174KB

    • MD5

      3fb410d92ad4598149fb3628018a63a7

    • SHA1

      4117a5b64ebebad09d5500c5f80d6ce82eaf8101

    • SHA256

      3bbd1c9cd82093ec083a4cb914ebfd934cde9bd90629457bf8a18484430c5a48

    • SHA512

      796c863e4966cc0dde553054c17caa6b23d6ed2a0ba6498597545a9fd14926ba253a0cabe8901d21da78e2d3f84c390e2ef1a5d2c5dcd07d095cb3aa0157e589

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks