Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

  • Size

    174KB

  • Sample

    210611-3jmv41421n

  • MD5

    2c40260cfa90bfe815711b4aec7ed69c

  • SHA1

    f1afe5720fb291fdc4c08d44c4af0ff2159ce980

  • SHA256

    fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

  • SHA512

    60eaf1d386b5826f84f13c0cc8971684257bfaba19d13d5870cb87356110cccd7a80db287a44f0f8b3ee125c3df1d0b415c267f7ce15d52ed98eb89a7252d18d

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

    • Size

      174KB

    • MD5

      2c40260cfa90bfe815711b4aec7ed69c

    • SHA1

      f1afe5720fb291fdc4c08d44c4af0ff2159ce980

    • SHA256

      fac37d736d05a4311a2b41877cdf5da53c3a5a4bf1373325ca6db2b72f672b72

    • SHA512

      60eaf1d386b5826f84f13c0cc8971684257bfaba19d13d5870cb87356110cccd7a80db287a44f0f8b3ee125c3df1d0b415c267f7ce15d52ed98eb89a7252d18d

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks