Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b2124f2f53ccca4c02e8ab765ba1354dc5ccd9d8c1fb87e5ffe9102ff90cdaf

  • Size

    174KB

  • Sample

    210611-1s3sk7d63s

  • MD5

    652192d80bbf28e95c26bebe6dc50504

  • SHA1

    f5e4f0da881e6e2005585cc15a410ae9f7dffd32

  • SHA256

    7b2124f2f53ccca4c02e8ab765ba1354dc5ccd9d8c1fb87e5ffe9102ff90cdaf

  • SHA512

    93ad1a52e609528e7067c24e4095aa85379a54ce3a6da5b590b57ab5c730e3c0ac89780f871d3841dc1a24f650c281228f535c923995d1a52485871220b1984f

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      7b2124f2f53ccca4c02e8ab765ba1354dc5ccd9d8c1fb87e5ffe9102ff90cdaf

    • Size

      174KB

    • MD5

      652192d80bbf28e95c26bebe6dc50504

    • SHA1

      f5e4f0da881e6e2005585cc15a410ae9f7dffd32

    • SHA256

      7b2124f2f53ccca4c02e8ab765ba1354dc5ccd9d8c1fb87e5ffe9102ff90cdaf

    • SHA512

      93ad1a52e609528e7067c24e4095aa85379a54ce3a6da5b590b57ab5c730e3c0ac89780f871d3841dc1a24f650c281228f535c923995d1a52485871220b1984f

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks