Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e650b57499238720b8bd69487d11f262291ae5d5a86c62e2da92a8af547b6e15

  • Size

    170KB

  • Sample

    210611-nfxll3kdt2

  • MD5

    c7ba626b6dfdd121f430d2860a4e8be6

  • SHA1

    353879bec8b3c76006281c931b5ca913a2e079ec

  • SHA256

    e650b57499238720b8bd69487d11f262291ae5d5a86c62e2da92a8af547b6e15

  • SHA512

    df8ae4959a0eda3d2532e59ce8764e94a2e613bf9f6e806740862f842cceb5f6deb77a08f9e71a6d76b2bd56ccbd92034b7f3b2b2c917697c14835738ccf9915

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

210.65.244.187:443

162.241.41.92:2303

46.231.204.10:8172

185.183.159.100:4125
rc4.plain
rc4.plain

Targets

    • Target

      e650b57499238720b8bd69487d11f262291ae5d5a86c62e2da92a8af547b6e15

    • Size

      170KB

    • MD5

      c7ba626b6dfdd121f430d2860a4e8be6

    • SHA1

      353879bec8b3c76006281c931b5ca913a2e079ec

    • SHA256

      e650b57499238720b8bd69487d11f262291ae5d5a86c62e2da92a8af547b6e15

    • SHA512

      df8ae4959a0eda3d2532e59ce8764e94a2e613bf9f6e806740862f842cceb5f6deb77a08f9e71a6d76b2bd56ccbd92034b7f3b2b2c917697c14835738ccf9915

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks