dridex | eb570e12d95a9e3406bc8766d1cb8000b02ed7ce41e7ec64179d3f593c2c3d4c | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
eb570e12d95a9e3406bc8766d1cb8000b02ed7ce41e7ec64179d3f593c2c3d4c
Size 172KB
Sample210615-ftamfd5bga
SHA256 eb570e12d95a9e3406bc8766d1cb8000b02ed7ce41e7ec64179d3f593c2c3d4c
MD5 cecfb30b2665aaf295eaa1246f217c5c
SHA1 ee9494c9b795093d177e7e8ecee6f9f9bb98a57f
SHA512 811cff177ec1b7fa460dcd21c7394647d3637dee838c570b13c359b4f03cf54a8d291a4c06b926dc557e84e14985983962cbefca33c5ff34bb490c69f5c5776c
MD5 SHA1 SHA512

Score

10^/10

dridex 40112 botnet loader

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

210.65.244.187:443
162.241.41.92:2303
46.231.204.10:8172
185.183.159.100:4125

rc4.plain

rc4.plain

Targets

- Target
  eb570e12d95a9e3406bc8766d1cb8000b02ed7ce41e7ec64179d3f593c2c3d4c
- Size 172KB
- SHA256 eb570e12d95a9e3406bc8766d1cb8000b02ed7ce41e7ec64179d3f593c2c3d4c
- MD5 cecfb30b2665aaf295eaa1246f217c5c
- SHA1 ee9494c9b795093d177e7e8ecee6f9f9bb98a57f
- SHA512 811cff177ec1b7fa460dcd21c7394647d3637dee838c570b13c359b4f03cf54a8d291a4c06b926dc557e84e14985983962cbefca33c5ff34bb490c69f5c5776c
- MD5 SHA1 SHA512
Score

10^/10

dridex 40112 botnet loader
- Dridex
  Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.
  botnet dridex
- Dridex Loader
  Detects Dridex both x86 and x64 loader in memory.
  botnet loader
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

dridex40112botnetloader