Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a76b840f36e8b0cc0ce1f0f5617632bc42b2370692b1d50c1aa56622e828d7af

  • Size

    158KB

  • Sample

    210626-awv5fanm6a

  • MD5

    c97bf48f0330a348b41a8d0e681c8230

  • SHA1

    051dd81beb3d783efea33e16510a31bcfaaeea2a

  • SHA256

    a76b840f36e8b0cc0ce1f0f5617632bc42b2370692b1d50c1aa56622e828d7af

  • SHA512

    9692001457b306af842a3dc15c50ae32869987fa925450aa14341f2f8aaac478ec9defced2d9e59f86a1ef527b7a3ebc80d462eec2be3e5d0a47ab17b05f57bc

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      a76b840f36e8b0cc0ce1f0f5617632bc42b2370692b1d50c1aa56622e828d7af

    • Size

      158KB

    • MD5

      c97bf48f0330a348b41a8d0e681c8230

    • SHA1

      051dd81beb3d783efea33e16510a31bcfaaeea2a

    • SHA256

      a76b840f36e8b0cc0ce1f0f5617632bc42b2370692b1d50c1aa56622e828d7af

    • SHA512

      9692001457b306af842a3dc15c50ae32869987fa925450aa14341f2f8aaac478ec9defced2d9e59f86a1ef527b7a3ebc80d462eec2be3e5d0a47ab17b05f57bc

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks