Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84f44ae10889ca0d7cfad911c9ee2baa3a751d807dae2ad6f8e57b0f4a53a510

  • Size

    158KB

  • Sample

    210621-p5tfln2za2

  • MD5

    31fb10042d7cb5f0ddfbb3ec2146c7ea

  • SHA1

    9180cde702f953819b86363c2ca7ed925ed8d790

  • SHA256

    84f44ae10889ca0d7cfad911c9ee2baa3a751d807dae2ad6f8e57b0f4a53a510

  • SHA512

    45e2535eedd29b2b0b818ba863d54a48d30ad4b13020fb7b5316e2c147baaba71a1ea4da9f9430beb09461b2c8a7a6598e2029bc3fca1c7e7c22dfcd4d19fa48

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      84f44ae10889ca0d7cfad911c9ee2baa3a751d807dae2ad6f8e57b0f4a53a510

    • Size

      158KB

    • MD5

      31fb10042d7cb5f0ddfbb3ec2146c7ea

    • SHA1

      9180cde702f953819b86363c2ca7ed925ed8d790

    • SHA256

      84f44ae10889ca0d7cfad911c9ee2baa3a751d807dae2ad6f8e57b0f4a53a510

    • SHA512

      45e2535eedd29b2b0b818ba863d54a48d30ad4b13020fb7b5316e2c147baaba71a1ea4da9f9430beb09461b2c8a7a6598e2029bc3fca1c7e7c22dfcd4d19fa48

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks