Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    975b9b0e22925662e9406d04cdb470fc9cd58583628cfc3449a11ec28e9940b3

  • Size

    174KB

  • Sample

    210611-4htgxxmv3e

  • MD5

    4d175cb9787096d7e4c1af457eadbdca

  • SHA1

    93f6f3af105d066f349ad68b45617c51d56c2347

  • SHA256

    975b9b0e22925662e9406d04cdb470fc9cd58583628cfc3449a11ec28e9940b3

  • SHA512

    e85d25ffe0804abce8e7ba46f2107ac947375b59d28ab0b82bf2b58ea8f1b84e9e785644e14603568c9329c0b9c401cdd633ba14dbc309ead11a6d25a5c07cb5

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      975b9b0e22925662e9406d04cdb470fc9cd58583628cfc3449a11ec28e9940b3

    • Size

      174KB

    • MD5

      4d175cb9787096d7e4c1af457eadbdca

    • SHA1

      93f6f3af105d066f349ad68b45617c51d56c2347

    • SHA256

      975b9b0e22925662e9406d04cdb470fc9cd58583628cfc3449a11ec28e9940b3

    • SHA512

      e85d25ffe0804abce8e7ba46f2107ac947375b59d28ab0b82bf2b58ea8f1b84e9e785644e14603568c9329c0b9c401cdd633ba14dbc309ead11a6d25a5c07cb5

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks