Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73943e9637a08422767a7fc01341849d306a48a3f716307d5e504e83c7e409bc

  • Size

    174KB

  • Sample

    210611-yrzprsngan

  • MD5

    c9ca52ab80937ac0b1609eae1ea42668

  • SHA1

    16a9f34191e0c54fcb6097a2e3c795a2a969dc24

  • SHA256

    73943e9637a08422767a7fc01341849d306a48a3f716307d5e504e83c7e409bc

  • SHA512

    7aac2ce0c4c75acbf58eb946c1237beb36c85e7dcd08a6ddf6ef8c0af9e6975d45a7e11e049e56a3c0e18bf6b0d434216de39014edc5beafb6e98687745f6d46

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

178.128.220.64:30333

45.79.91.89:9987
rc4.plain
rc4.plain

Targets

    • Target

      73943e9637a08422767a7fc01341849d306a48a3f716307d5e504e83c7e409bc

    • Size

      174KB

    • MD5

      c9ca52ab80937ac0b1609eae1ea42668

    • SHA1

      16a9f34191e0c54fcb6097a2e3c795a2a969dc24

    • SHA256

      73943e9637a08422767a7fc01341849d306a48a3f716307d5e504e83c7e409bc

    • SHA512

      7aac2ce0c4c75acbf58eb946c1237beb36c85e7dcd08a6ddf6ef8c0af9e6975d45a7e11e049e56a3c0e18bf6b0d434216de39014edc5beafb6e98687745f6d46

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks