Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fecd861c2d3542eb937afe88aff2c2dc04c27a63add75a34ad796ac5f72fc096

  • Size

    170KB

  • Sample

    210611-j8m2qx1f6a

  • MD5

    92c7c8bf46584eb05890dd76dace2b97

  • SHA1

    6ad5f498e722a62291bf8229a36bf817bbf89a3f

  • SHA256

    fecd861c2d3542eb937afe88aff2c2dc04c27a63add75a34ad796ac5f72fc096

  • SHA512

    d84dee4e0838fc34c2cd3f649e6110da8a4735bfbef34dc186a78d43eff0372082a35e757243b4b4aee18884e3b770583e4f32be1d8a365808456a3ea6e1c7fb

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125
rc4.plain
rc4.plain

Targets

    • Target

      fecd861c2d3542eb937afe88aff2c2dc04c27a63add75a34ad796ac5f72fc096

    • Size

      170KB

    • MD5

      92c7c8bf46584eb05890dd76dace2b97

    • SHA1

      6ad5f498e722a62291bf8229a36bf817bbf89a3f

    • SHA256

      fecd861c2d3542eb937afe88aff2c2dc04c27a63add75a34ad796ac5f72fc096

    • SHA512

      d84dee4e0838fc34c2cd3f649e6110da8a4735bfbef34dc186a78d43eff0372082a35e757243b4b4aee18884e3b770583e4f32be1d8a365808456a3ea6e1c7fb

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks