Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e600c29f9098e883152fe8217bc038d78247ec9c89b67dca61237c475424e2ba

  • Size

    172KB

  • Sample

    210611-646hpj3nte

  • MD5

    12f0606cf66614880427b84b592f51bc

  • SHA1

    a62dfe82459bb4d20808e04b28c82927c17b77ed

  • SHA256

    e600c29f9098e883152fe8217bc038d78247ec9c89b67dca61237c475424e2ba

  • SHA512

    871e12a2dbcbad092784aeb5d0c95726085fc95c77af9f8bb59eae9fe7f3c21b163a5ad004149437f544e634280fd66b699f753c4b08d00f2bcd996213c9f5ca

Score
10/10
dridex40112botnetloader

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125
rc4.plain
rc4.plain

Targets

    • Target

      e600c29f9098e883152fe8217bc038d78247ec9c89b67dca61237c475424e2ba

    • Size

      172KB

    • MD5

      12f0606cf66614880427b84b592f51bc

    • SHA1

      a62dfe82459bb4d20808e04b28c82927c17b77ed

    • SHA256

      e600c29f9098e883152fe8217bc038d78247ec9c89b67dca61237c475424e2ba

    • SHA512

      871e12a2dbcbad092784aeb5d0c95726085fc95c77af9f8bb59eae9fe7f3c21b163a5ad004149437f544e634280fd66b699f753c4b08d00f2bcd996213c9f5ca

    Score
    10/10
    dridex40112botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks