Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77920c286d9af93309f716f6d6d96e1b870682e84d1ce6db92c3453e7f31638d

  • Size

    160KB

  • Sample

    210611-l7av9cadqe

  • MD5

    b9d209560d44dfb51595976987b11e9f

  • SHA1

    4ae2d20456709302263c25547af0a986137864e0

  • SHA256

    77920c286d9af93309f716f6d6d96e1b870682e84d1ce6db92c3453e7f31638d

  • SHA512

    e0ce78029e280de2b9e4d190156b68669fbfedd14676c1c6639b27e58f71572dfc1ed9477553749e6c58e205029cddfd6c2068c03aa95dd188b8fd82b342f4bc

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303
rc4.plain
rc4.plain

Targets

    • Target

      77920c286d9af93309f716f6d6d96e1b870682e84d1ce6db92c3453e7f31638d

    • Size

      160KB

    • MD5

      b9d209560d44dfb51595976987b11e9f

    • SHA1

      4ae2d20456709302263c25547af0a986137864e0

    • SHA256

      77920c286d9af93309f716f6d6d96e1b870682e84d1ce6db92c3453e7f31638d

    • SHA512

      e0ce78029e280de2b9e4d190156b68669fbfedd14676c1c6639b27e58f71572dfc1ed9477553749e6c58e205029cddfd6c2068c03aa95dd188b8fd82b342f4bc

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks