Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78ab50755c4ace33a1c4322e8d9d95d516a3705377fe6273b3fd70d581e0fd6c

  • Size

    158KB

  • Sample

    210620-vet1ke3yzs

  • MD5

    8059f160a3745630193e9a96ba4a826b

  • SHA1

    c1f453e2e14d2abb41f40ceef14694cbc319d854

  • SHA256

    78ab50755c4ace33a1c4322e8d9d95d516a3705377fe6273b3fd70d581e0fd6c

  • SHA512

    ae640c5e639a598ce2daca4563de58abcee2971200b76e580fd7a1baa09f2be8ed680ba53d72d2aa3299a07b2026ed97308e27ec54858aa22e3d5affb79472b2

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      78ab50755c4ace33a1c4322e8d9d95d516a3705377fe6273b3fd70d581e0fd6c

    • Size

      158KB

    • MD5

      8059f160a3745630193e9a96ba4a826b

    • SHA1

      c1f453e2e14d2abb41f40ceef14694cbc319d854

    • SHA256

      78ab50755c4ace33a1c4322e8d9d95d516a3705377fe6273b3fd70d581e0fd6c

    • SHA512

      ae640c5e639a598ce2daca4563de58abcee2971200b76e580fd7a1baa09f2be8ed680ba53d72d2aa3299a07b2026ed97308e27ec54858aa22e3d5affb79472b2

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks