Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58ae6d14de59777210aee54675b66e0ce17cb258067a2b7a918d73c81232b1cd

  • Size

    160KB

  • Sample

    210622-5n39cvaycn

  • MD5

    0e2ff1a880a17d91ecc37133de8d0ca4

  • SHA1

    f0954da37d5c4031a8a3ec565f4e231f75482054

  • SHA256

    58ae6d14de59777210aee54675b66e0ce17cb258067a2b7a918d73c81232b1cd

  • SHA512

    132837022f1f553cbcfe328b5a979f237ae2a681b008c58d292bc377dfba4c19bd8fe6905a17a93ba782c28be6398aff0f9b16a9358bad13b22ab12747367640

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303
rc4.plain
rc4.plain

Targets

    • Target

      58ae6d14de59777210aee54675b66e0ce17cb258067a2b7a918d73c81232b1cd

    • Size

      160KB

    • MD5

      0e2ff1a880a17d91ecc37133de8d0ca4

    • SHA1

      f0954da37d5c4031a8a3ec565f4e231f75482054

    • SHA256

      58ae6d14de59777210aee54675b66e0ce17cb258067a2b7a918d73c81232b1cd

    • SHA512

      132837022f1f553cbcfe328b5a979f237ae2a681b008c58d292bc377dfba4c19bd8fe6905a17a93ba782c28be6398aff0f9b16a9358bad13b22ab12747367640

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks