Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50dff9665b09a9c98945e8e89e09be92c4372b3512a4f40585b72f1c0748babe

  • Size

    170KB

  • Sample

    210611-9rmywnldhx

  • MD5

    44f62a18a7eb3fc9189c5bc348ba2a59

  • SHA1

    72daa3554810185becc859414d7cf7376787f629

  • SHA256

    50dff9665b09a9c98945e8e89e09be92c4372b3512a4f40585b72f1c0748babe

  • SHA512

    c0a541126c72d7070035cb2007aec8dd21193100e99cd5bb69bda7e55c486cbed2fdababff80fdde070f2f7382734e8293192ccda4741e3f427807403f9b0245

Score
10/10
dridex40112botnetloader

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125
rc4.plain
rc4.plain

Targets

    • Target

      50dff9665b09a9c98945e8e89e09be92c4372b3512a4f40585b72f1c0748babe

    • Size

      170KB

    • MD5

      44f62a18a7eb3fc9189c5bc348ba2a59

    • SHA1

      72daa3554810185becc859414d7cf7376787f629

    • SHA256

      50dff9665b09a9c98945e8e89e09be92c4372b3512a4f40585b72f1c0748babe

    • SHA512

      c0a541126c72d7070035cb2007aec8dd21193100e99cd5bb69bda7e55c486cbed2fdababff80fdde070f2f7382734e8293192ccda4741e3f427807403f9b0245

    Score
    10/10
    dridex40112botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks