Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac228de57dd2b0f554b350b97664c682681be76e372a32c2a130c819539b9b0f

  • Size

    174KB

  • Sample

    210611-89hprk4m52

  • MD5

    a4a8cb379b3a40014fa35635b3c5bcb3

  • SHA1

    78ff459cb487e65319d445d32b5c7b70558fdeb8

  • SHA256

    ac228de57dd2b0f554b350b97664c682681be76e372a32c2a130c819539b9b0f

  • SHA512

    49835c6033bef20095016adfa6cd59fc70e04efe61e8ce461dbd506ad240f576c8de30d878cbe7057060e0c2e3c3327d2213a3e957cd42d5caf1f55763fe1355

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      ac228de57dd2b0f554b350b97664c682681be76e372a32c2a130c819539b9b0f

    • Size

      174KB

    • MD5

      a4a8cb379b3a40014fa35635b3c5bcb3

    • SHA1

      78ff459cb487e65319d445d32b5c7b70558fdeb8

    • SHA256

      ac228de57dd2b0f554b350b97664c682681be76e372a32c2a130c819539b9b0f

    • SHA512

      49835c6033bef20095016adfa6cd59fc70e04efe61e8ce461dbd506ad240f576c8de30d878cbe7057060e0c2e3c3327d2213a3e957cd42d5caf1f55763fe1355

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks