Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9b7a1af4d434b6ce90012bf7ece4783b9946d82a642f10616381dcf77e4d405

  • Size

    160KB

  • Sample

    210625-kevpmvd1vn

  • MD5

    77edd4c7334b33fdd36c3ff76107e547

  • SHA1

    6f31355d2c83467ecd60abd07fdf998078c86ef0

  • SHA256

    a9b7a1af4d434b6ce90012bf7ece4783b9946d82a642f10616381dcf77e4d405

  • SHA512

    5f853d5f4768a43fd03e8c38423396b10e661dca237b743d1dcb55d9c07b6c4e3623e5f1efd0b0d6382c026ca741a4e922978088b18337dce80ccd51dc983c69

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

94.247.168.64:443

159.203.93.122:8172

50.116.27.97:2303
rc4.plain
rc4.plain

Targets

    • Target

      a9b7a1af4d434b6ce90012bf7ece4783b9946d82a642f10616381dcf77e4d405

    • Size

      160KB

    • MD5

      77edd4c7334b33fdd36c3ff76107e547

    • SHA1

      6f31355d2c83467ecd60abd07fdf998078c86ef0

    • SHA256

      a9b7a1af4d434b6ce90012bf7ece4783b9946d82a642f10616381dcf77e4d405

    • SHA512

      5f853d5f4768a43fd03e8c38423396b10e661dca237b743d1dcb55d9c07b6c4e3623e5f1efd0b0d6382c026ca741a4e922978088b18337dce80ccd51dc983c69

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks