Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16d2072700d11c35a65fd56caef17dc028bda2c45c4bf0fc0e02b217f32e872a

  • Size

    174KB

  • Sample

    210611-tmrfkqqyaj

  • MD5

    cf342d67b3d927d8e3676404be8d941f

  • SHA1

    f5c53cb8a283ac807fa1e7f8d8e499c5edf53d62

  • SHA256

    16d2072700d11c35a65fd56caef17dc028bda2c45c4bf0fc0e02b217f32e872a

  • SHA512

    41600ae778976a9c8c3ca06302ebd67c5531ad1aa0b87e3b4a3d540e225a4a655be90ca839a0044596204c062e9b891e541bcf2da7b7ea572ffc42a5daaf3b86

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      16d2072700d11c35a65fd56caef17dc028bda2c45c4bf0fc0e02b217f32e872a

    • Size

      174KB

    • MD5

      cf342d67b3d927d8e3676404be8d941f

    • SHA1

      f5c53cb8a283ac807fa1e7f8d8e499c5edf53d62

    • SHA256

      16d2072700d11c35a65fd56caef17dc028bda2c45c4bf0fc0e02b217f32e872a

    • SHA512

      41600ae778976a9c8c3ca06302ebd67c5531ad1aa0b87e3b4a3d540e225a4a655be90ca839a0044596204c062e9b891e541bcf2da7b7ea572ffc42a5daaf3b86

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks