Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a62cb0074490adfd61053c5c4b0556513d9df09fedae8019f61326d6c4a06d4b

  • Size

    158KB

  • Sample

    210627-srdjn7zdes

  • MD5

    1f3dc9691244065aaab99ec7f1da76f8

  • SHA1

    6e661df07dd9b16045be389d256c43af714a6479

  • SHA256

    a62cb0074490adfd61053c5c4b0556513d9df09fedae8019f61326d6c4a06d4b

  • SHA512

    ce8fdd34c0a68bce8911a93549ef84ababea0ce95f922404bfa4f7cde269fc6df9d7099ba1fb653449ac6a8004b9364c708c80fb9bc0d9b366dd0e5c8745a80b

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      a62cb0074490adfd61053c5c4b0556513d9df09fedae8019f61326d6c4a06d4b

    • Size

      158KB

    • MD5

      1f3dc9691244065aaab99ec7f1da76f8

    • SHA1

      6e661df07dd9b16045be389d256c43af714a6479

    • SHA256

      a62cb0074490adfd61053c5c4b0556513d9df09fedae8019f61326d6c4a06d4b

    • SHA512

      ce8fdd34c0a68bce8911a93549ef84ababea0ce95f922404bfa4f7cde269fc6df9d7099ba1fb653449ac6a8004b9364c708c80fb9bc0d9b366dd0e5c8745a80b

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks