Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be0a9fa858dd29e55f16885c0ee9a9b5dc7fd1c7b3f5c84cc263501fc63671e3

  • Size

    174KB

  • Sample

    210611-k362n56aps

  • MD5

    2ec65013271edd1a1ed9442899f80351

  • SHA1

    ed0fd43e5a8de78fbf1fe2d6d6a9318400e68b94

  • SHA256

    be0a9fa858dd29e55f16885c0ee9a9b5dc7fd1c7b3f5c84cc263501fc63671e3

  • SHA512

    05819968f36d3047ea4b6de6bd45fcad6ef6b7bb162bf461409cf20919118d008733ee9c014bcd5be478884b8a755742cd4295c69df964fc8d74fa7a8ffd87b4

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      be0a9fa858dd29e55f16885c0ee9a9b5dc7fd1c7b3f5c84cc263501fc63671e3

    • Size

      174KB

    • MD5

      2ec65013271edd1a1ed9442899f80351

    • SHA1

      ed0fd43e5a8de78fbf1fe2d6d6a9318400e68b94

    • SHA256

      be0a9fa858dd29e55f16885c0ee9a9b5dc7fd1c7b3f5c84cc263501fc63671e3

    • SHA512

      05819968f36d3047ea4b6de6bd45fcad6ef6b7bb162bf461409cf20919118d008733ee9c014bcd5be478884b8a755742cd4295c69df964fc8d74fa7a8ffd87b4

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks