Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1ca4dc87961e1325c4d9b777f0291c225b7a37fb21c691a5b82d7956befa3e5

  • Size

    170KB

  • Sample

    210611-1yythyrc86

  • MD5

    00bd81aac7dbd387bf2fc4ea1d491e64

  • SHA1

    c5705aa6326196be2e0453bd9f307ed30abc08f0

  • SHA256

    e1ca4dc87961e1325c4d9b777f0291c225b7a37fb21c691a5b82d7956befa3e5

  • SHA512

    988b33ca17336416c4493d8ac3232132e80a86f67888f5240e381062e4129f172ae523e51c0fad44d054562af4c8def6373136c5573b270b449e5563c0f73534

Score
10/10
dridex40112botnetloader

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125
rc4.plain
rc4.plain

Targets

    • Target

      e1ca4dc87961e1325c4d9b777f0291c225b7a37fb21c691a5b82d7956befa3e5

    • Size

      170KB

    • MD5

      00bd81aac7dbd387bf2fc4ea1d491e64

    • SHA1

      c5705aa6326196be2e0453bd9f307ed30abc08f0

    • SHA256

      e1ca4dc87961e1325c4d9b777f0291c225b7a37fb21c691a5b82d7956befa3e5

    • SHA512

      988b33ca17336416c4493d8ac3232132e80a86f67888f5240e381062e4129f172ae523e51c0fad44d054562af4c8def6373136c5573b270b449e5563c0f73534

    Score
    10/10
    dridex40112botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks