Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da5fb1d8d7063ee3151afb9f1b0d68af446b876172cb22799405b25b0683da8a

  • Size

    170KB

  • Sample

    210611-gfx9465xks

  • MD5

    5dee66bde236e22c89c15fa9751a742b

  • SHA1

    dd109c809c38ea436522143091eb78e95a32b924

  • SHA256

    da5fb1d8d7063ee3151afb9f1b0d68af446b876172cb22799405b25b0683da8a

  • SHA512

    0d71a7b56c8dacadc8863b85e9e7ef04868c9136aad93a19be7a45208769e888e1b118014e2437b6a5ae4a36cfcecefec8f56a93508df92418412dbdbfe9e967

Score
10/10
dridex40112botnetloader

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125
rc4.plain
rc4.plain

Targets

    • Target

      da5fb1d8d7063ee3151afb9f1b0d68af446b876172cb22799405b25b0683da8a

    • Size

      170KB

    • MD5

      5dee66bde236e22c89c15fa9751a742b

    • SHA1

      dd109c809c38ea436522143091eb78e95a32b924

    • SHA256

      da5fb1d8d7063ee3151afb9f1b0d68af446b876172cb22799405b25b0683da8a

    • SHA512

      0d71a7b56c8dacadc8863b85e9e7ef04868c9136aad93a19be7a45208769e888e1b118014e2437b6a5ae4a36cfcecefec8f56a93508df92418412dbdbfe9e967

    Score
    10/10
    dridex40112botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks