Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f0261ba6f28dc7fdb71b4032a4eaa3d1c6cb4c901f024fe170373d7d3513a77

  • Size

    174KB

  • Sample

    210611-7qk2k1meds

  • MD5

    d098ddf4f72545cb2eda16a4340518c2

  • SHA1

    05bdafaedc09bca16749cd9585af7ca86c92135c

  • SHA256

    0f0261ba6f28dc7fdb71b4032a4eaa3d1c6cb4c901f024fe170373d7d3513a77

  • SHA512

    b477f3128d37416de20625cc40ab900f31856d666a84c3d95b85aa74741fe7ef7d51fd11944b072be70e3bdda0faf14d0d9b7967bbf317d14958e173a1d88c52

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      0f0261ba6f28dc7fdb71b4032a4eaa3d1c6cb4c901f024fe170373d7d3513a77

    • Size

      174KB

    • MD5

      d098ddf4f72545cb2eda16a4340518c2

    • SHA1

      05bdafaedc09bca16749cd9585af7ca86c92135c

    • SHA256

      0f0261ba6f28dc7fdb71b4032a4eaa3d1c6cb4c901f024fe170373d7d3513a77

    • SHA512

      b477f3128d37416de20625cc40ab900f31856d666a84c3d95b85aa74741fe7ef7d51fd11944b072be70e3bdda0faf14d0d9b7967bbf317d14958e173a1d88c52

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks