Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88575336a9b27718978ccc624a1eba4d6c786ee8ece81c93ea8b585c5a6fbff1

  • Size

    158KB

  • Sample

    210619-k7ppwratxn

  • MD5

    be8140724dc712e5d23a2a250a68bc71

  • SHA1

    486ba9806e9b88e8746cfe8474582b94f9a58797

  • SHA256

    88575336a9b27718978ccc624a1eba4d6c786ee8ece81c93ea8b585c5a6fbff1

  • SHA512

    aeebdf8b28861a9269a08bd229706f56779047ab98daee8a76f16cbdf951efda4de417a4f77d4d8f3cea8c9ffd966780fc4db2ed3ec583f419009ac49e39b62a

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      88575336a9b27718978ccc624a1eba4d6c786ee8ece81c93ea8b585c5a6fbff1

    • Size

      158KB

    • MD5

      be8140724dc712e5d23a2a250a68bc71

    • SHA1

      486ba9806e9b88e8746cfe8474582b94f9a58797

    • SHA256

      88575336a9b27718978ccc624a1eba4d6c786ee8ece81c93ea8b585c5a6fbff1

    • SHA512

      aeebdf8b28861a9269a08bd229706f56779047ab98daee8a76f16cbdf951efda4de417a4f77d4d8f3cea8c9ffd966780fc4db2ed3ec583f419009ac49e39b62a

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks