Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66c32c86d407045cc15c30b5094adb075db2560c453eb8d9f3a2fdc41927b513

  • Size

    160KB

  • Sample

    210625-eewwqgts5a

  • MD5

    7ca0abe611c2ed23d65b595a6a6b7bbc

  • SHA1

    44a34588d369f0539baee6c8ffe7953a7107fb46

  • SHA256

    66c32c86d407045cc15c30b5094adb075db2560c453eb8d9f3a2fdc41927b513

  • SHA512

    09721740c776000c92ae208fb1f1e95d091612bfad1db8759db0c6693a1ba3091772a1b679b457f2cce688127f9e5a5e346a002ab7ccb99c334089532337c3de

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303
rc4.plain
rc4.plain

Targets

    • Target

      66c32c86d407045cc15c30b5094adb075db2560c453eb8d9f3a2fdc41927b513

    • Size

      160KB

    • MD5

      7ca0abe611c2ed23d65b595a6a6b7bbc

    • SHA1

      44a34588d369f0539baee6c8ffe7953a7107fb46

    • SHA256

      66c32c86d407045cc15c30b5094adb075db2560c453eb8d9f3a2fdc41927b513

    • SHA512

      09721740c776000c92ae208fb1f1e95d091612bfad1db8759db0c6693a1ba3091772a1b679b457f2cce688127f9e5a5e346a002ab7ccb99c334089532337c3de

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks