Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b38fc28b9b2439b63c04ed44d80ed6cbb4aefa8dfbae93ed7934c1bd3282a130

  • Size

    174KB

  • Sample

    210611-p2naptpr9j

  • MD5

    5206f05ea399d9083f90556cd255d610

  • SHA1

    dac75a15829ae6b4c96aff923aafe519211d8002

  • SHA256

    b38fc28b9b2439b63c04ed44d80ed6cbb4aefa8dfbae93ed7934c1bd3282a130

  • SHA512

    806d7be2e8a14bffca5d7a22384001146a39c2e2644a9fc97f3e3dd750f92502e4258d26020d4ea6809714f81a32c7455008bb97f5a42656bc4b833c97534473

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      b38fc28b9b2439b63c04ed44d80ed6cbb4aefa8dfbae93ed7934c1bd3282a130

    • Size

      174KB

    • MD5

      5206f05ea399d9083f90556cd255d610

    • SHA1

      dac75a15829ae6b4c96aff923aafe519211d8002

    • SHA256

      b38fc28b9b2439b63c04ed44d80ed6cbb4aefa8dfbae93ed7934c1bd3282a130

    • SHA512

      806d7be2e8a14bffca5d7a22384001146a39c2e2644a9fc97f3e3dd750f92502e4258d26020d4ea6809714f81a32c7455008bb97f5a42656bc4b833c97534473

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks