Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6237d59a3e0a659f6925425f1073e57d9973af01780d914532f84d5ae4d96562

  • Size

    170KB

  • Sample

    210611-ngbem88x1j

  • MD5

    3eddf0826d53985b645b42c38821107a

  • SHA1

    91c8beac36e26e1250ea3c78aea51b9db43ffd46

  • SHA256

    6237d59a3e0a659f6925425f1073e57d9973af01780d914532f84d5ae4d96562

  • SHA512

    c9f5fee211f0e61d223cfadc9f504ea25017a09de6a69052cc4626262dd5eca040a0d9ca07737dbc48dfd3af12ad883e48886f5b53057f89e0f17eaa6d0e6fb9

Score
10/10
dridex40112botnetloader

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125
rc4.plain
rc4.plain

Targets

    • Target

      6237d59a3e0a659f6925425f1073e57d9973af01780d914532f84d5ae4d96562

    • Size

      170KB

    • MD5

      3eddf0826d53985b645b42c38821107a

    • SHA1

      91c8beac36e26e1250ea3c78aea51b9db43ffd46

    • SHA256

      6237d59a3e0a659f6925425f1073e57d9973af01780d914532f84d5ae4d96562

    • SHA512

      c9f5fee211f0e61d223cfadc9f504ea25017a09de6a69052cc4626262dd5eca040a0d9ca07737dbc48dfd3af12ad883e48886f5b53057f89e0f17eaa6d0e6fb9

    Score
    10/10
    dridex40112botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks