Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22efb1c9760aedabd756f9bcf3a7d6f6177aeb0c1734e0e1dd7744e5143bf61f

  • Size

    174KB

  • Sample

    210611-4hczz1grln

  • MD5

    b635229279d681826696f6fd5917f86d

  • SHA1

    61925a9c49797650e402512c399451b2af6a276b

  • SHA256

    22efb1c9760aedabd756f9bcf3a7d6f6177aeb0c1734e0e1dd7744e5143bf61f

  • SHA512

    451803efbed5a0385fd0b268ae30213ae9c828b06fa0f3d07e05a15d8ababd71435c9dd3e92434b51cb3ec4c844d3e154d855df42f7b3e2c895c5f995c007037

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      22efb1c9760aedabd756f9bcf3a7d6f6177aeb0c1734e0e1dd7744e5143bf61f

    • Size

      174KB

    • MD5

      b635229279d681826696f6fd5917f86d

    • SHA1

      61925a9c49797650e402512c399451b2af6a276b

    • SHA256

      22efb1c9760aedabd756f9bcf3a7d6f6177aeb0c1734e0e1dd7744e5143bf61f

    • SHA512

      451803efbed5a0385fd0b268ae30213ae9c828b06fa0f3d07e05a15d8ababd71435c9dd3e92434b51cb3ec4c844d3e154d855df42f7b3e2c895c5f995c007037

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks