Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee1333332a5a1293892f3921c9a9af1998a905bc022c92dac1111ee433dca3b9

  • Size

    170KB

  • Sample

    210611-j5lf444qdj

  • MD5

    9ed607c6ee4f7c105726b57a16e44825

  • SHA1

    0b3dc2034f41d632a2aeb5afe6f3667aebe46793

  • SHA256

    ee1333332a5a1293892f3921c9a9af1998a905bc022c92dac1111ee433dca3b9

  • SHA512

    86bae70fcdcad9071275c4897ec27aaeba4057ceb84c0e0f2ade3e2c608d22f754f3c4c69ee93cc36fa05aae73f426b37d9c105f69f96773ec92ed78fa62916c

Score
10/10
dridex40112botnetloader

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125
rc4.plain
rc4.plain

Targets

    • Target

      ee1333332a5a1293892f3921c9a9af1998a905bc022c92dac1111ee433dca3b9

    • Size

      170KB

    • MD5

      9ed607c6ee4f7c105726b57a16e44825

    • SHA1

      0b3dc2034f41d632a2aeb5afe6f3667aebe46793

    • SHA256

      ee1333332a5a1293892f3921c9a9af1998a905bc022c92dac1111ee433dca3b9

    • SHA512

      86bae70fcdcad9071275c4897ec27aaeba4057ceb84c0e0f2ade3e2c608d22f754f3c4c69ee93cc36fa05aae73f426b37d9c105f69f96773ec92ed78fa62916c

    Score
    10/10
    dridex40112botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks