Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45b2a8afdff7f78d4e7383d2347ef054a7049cde59183d6ada591e613af0f48d

  • Size

    174KB

  • Sample

    210611-5g8t4l8bb2

  • MD5

    6b85eb7bab4a4cf806089b55dccafe20

  • SHA1

    4d778b6635d9184a65b98f3eb4de13fe84d49fad

  • SHA256

    45b2a8afdff7f78d4e7383d2347ef054a7049cde59183d6ada591e613af0f48d

  • SHA512

    b3934939603cae377010aae8cf13e4b3cd7e4dcb6d9be9828a8b418b40d1e648795f56a811a641d94b0d018779711fc1976a5d08a874de5d5defda253a5d50a1

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      45b2a8afdff7f78d4e7383d2347ef054a7049cde59183d6ada591e613af0f48d

    • Size

      174KB

    • MD5

      6b85eb7bab4a4cf806089b55dccafe20

    • SHA1

      4d778b6635d9184a65b98f3eb4de13fe84d49fad

    • SHA256

      45b2a8afdff7f78d4e7383d2347ef054a7049cde59183d6ada591e613af0f48d

    • SHA512

      b3934939603cae377010aae8cf13e4b3cd7e4dcb6d9be9828a8b418b40d1e648795f56a811a641d94b0d018779711fc1976a5d08a874de5d5defda253a5d50a1

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks