Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6a252a96563d64caf5e95570f03ac27aa15c6f8b0c774e90a6ae281f729ecd2

  • Size

    163KB

  • Sample

    210611-z36vshg8js

  • MD5

    add9a25d39f121f4203ef9d61489923d

  • SHA1

    86e4dd38710db40fbc8ae654ba1f57c5979e21b3

  • SHA256

    b6a252a96563d64caf5e95570f03ac27aa15c6f8b0c774e90a6ae281f729ecd2

  • SHA512

    6dfee00f714ce12bf7bf9f480389ceade00aaddfbe1ee208bcbf5eef3e67126d6988cd61f8f841a03559ceafec3d0dd80854ed2323b39c978f535fe66524b762

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

43.229.206.212:443

82.209.17.209:8172

162.241.209.225:4125
rc4.plain
rc4.plain

Targets

    • Target

      b6a252a96563d64caf5e95570f03ac27aa15c6f8b0c774e90a6ae281f729ecd2

    • Size

      163KB

    • MD5

      add9a25d39f121f4203ef9d61489923d

    • SHA1

      86e4dd38710db40fbc8ae654ba1f57c5979e21b3

    • SHA256

      b6a252a96563d64caf5e95570f03ac27aa15c6f8b0c774e90a6ae281f729ecd2

    • SHA512

      6dfee00f714ce12bf7bf9f480389ceade00aaddfbe1ee208bcbf5eef3e67126d6988cd61f8f841a03559ceafec3d0dd80854ed2323b39c978f535fe66524b762

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks