dridex | b6f55a44b0ab260adb53bcbf8d2e3ac301d53f60a4ad8af1115da2d87f9eb569 | Triage

Submit
Reports

Overview

overview

Static

static

dridex

windows10_x64

Sharing

General

Target

b6f55a44b0ab260adb53bcbf8d2e3ac301d53f60a4ad8af1115da2d87f9eb569
Size

174KB
Sample

210611-w98excnvw2
MD5

e8dfc5162ff89a3b89238a326077edb3
SHA1

0b1f9fcb813159b11cbc02a96302b540d21ab78a
SHA256

b6f55a44b0ab260adb53bcbf8d2e3ac301d53f60a4ad8af1115da2d87f9eb569
SHA512

76a961a748591654826fdf8cb68d639b91efb3cc8bac0f36fbca22308ab871545f6bdb531fb0b689689d30d056d54b173ddbdff61d1b020b45e400fcc9bab43b

Score

10^/10

dridex 22201 botnet loader

Static task

static1

Behavioral task

behavioral1

Sample

b6f55a44b0ab260adb53bcbf8d2e3ac301d53f60a4ad8af1115da2d87f9eb569.dll

Resource

win10v20210408

dridex 22201 botnet loader

windows10_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987

rc4.plain

rc4.plain

Targets

- Target
  
  b6f55a44b0ab260adb53bcbf8d2e3ac301d53f60a4ad8af1115da2d87f9eb569
- Size
  
  174KB
- MD5
  
  e8dfc5162ff89a3b89238a326077edb3
- SHA1
  
  0b1f9fcb813159b11cbc02a96302b540d21ab78a
- SHA256
  
  b6f55a44b0ab260adb53bcbf8d2e3ac301d53f60a4ad8af1115da2d87f9eb569
- SHA512
  
  76a961a748591654826fdf8cb68d639b91efb3cc8bac0f36fbca22308ab871545f6bdb531fb0b689689d30d056d54b173ddbdff61d1b020b45e400fcc9bab43b
Score

10^/10

dridex 22201 botnet loader
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

dridex22201botnetloader

© 2018-2024

Terms | Privacy