Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    447d5b02d146a257a4e579284ffba651577546181e04958fd7c561cca458c2b6

  • Size

    158KB

  • Sample

    210619-nwy79zlv7x

  • MD5

    bf45b453661350c763b507647547de6d

  • SHA1

    8fa38d548df801875bd01d7bc16439b683e6d995

  • SHA256

    447d5b02d146a257a4e579284ffba651577546181e04958fd7c561cca458c2b6

  • SHA512

    e31c2439a204919c85bee1e3f2285f9e12ad00f1afec6649a34e91f969817b766d3164a0fe894d4b32f11ee53650bfb42218122dc8486459f5d1629b45f9fed4

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      447d5b02d146a257a4e579284ffba651577546181e04958fd7c561cca458c2b6

    • Size

      158KB

    • MD5

      bf45b453661350c763b507647547de6d

    • SHA1

      8fa38d548df801875bd01d7bc16439b683e6d995

    • SHA256

      447d5b02d146a257a4e579284ffba651577546181e04958fd7c561cca458c2b6

    • SHA512

      e31c2439a204919c85bee1e3f2285f9e12ad00f1afec6649a34e91f969817b766d3164a0fe894d4b32f11ee53650bfb42218122dc8486459f5d1629b45f9fed4

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks