Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40bfd45d8ea7db1674cc728758d34bb25c22624e578f54e4583a2460be8911fd

  • Size

    158KB

  • Sample

    210618-t6qawg9cyn

  • MD5

    c2941f9abd5e22697f1d7ccf07078dcf

  • SHA1

    1c84c7c6963451c0f9e07e8e82f95f8351ac9f8f

  • SHA256

    40bfd45d8ea7db1674cc728758d34bb25c22624e578f54e4583a2460be8911fd

  • SHA512

    9927f92e4fef7fcabe07a4541525ab0b1fa1115a717ad4e8628f7fabe85408a69ef5f1d2e6806d141227ea8dc3c37de0654fc115b5045f6f6ce4ed218a47b90a

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      40bfd45d8ea7db1674cc728758d34bb25c22624e578f54e4583a2460be8911fd

    • Size

      158KB

    • MD5

      c2941f9abd5e22697f1d7ccf07078dcf

    • SHA1

      1c84c7c6963451c0f9e07e8e82f95f8351ac9f8f

    • SHA256

      40bfd45d8ea7db1674cc728758d34bb25c22624e578f54e4583a2460be8911fd

    • SHA512

      9927f92e4fef7fcabe07a4541525ab0b1fa1115a717ad4e8628f7fabe85408a69ef5f1d2e6806d141227ea8dc3c37de0654fc115b5045f6f6ce4ed218a47b90a

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks