Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

  • Size

    170KB

  • Sample

    210611-kj2wal8q7s

  • MD5

    9be98aeaa48db0e6185bac6ea202aee5

  • SHA1

    0c58d64df2beea1a76ebc4a14664e96c83040226

  • SHA256

    473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

  • SHA512

    066117671e468dfe1957a193b90a7d861a16a95d4cf0f57f801045249ccd2dfc1b659dbf00adbffecececfd2cf661403d57e47001e30cef7885047b81807d338

Score
10/10
dridex40112botnetloader

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125
rc4.plain
rc4.plain

Targets

    • Target

      473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

    • Size

      170KB

    • MD5

      9be98aeaa48db0e6185bac6ea202aee5

    • SHA1

      0c58d64df2beea1a76ebc4a14664e96c83040226

    • SHA256

      473028503ff278b4da099b3581f0d1444b49ba9d3294a014edcdd018891bd298

    • SHA512

      066117671e468dfe1957a193b90a7d861a16a95d4cf0f57f801045249ccd2dfc1b659dbf00adbffecececfd2cf661403d57e47001e30cef7885047b81807d338

    Score
    10/10
    dridex40112botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks