Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8bd42cbe70b71fd44ccf18d6879d827fd215521463aef739b8dd01b48f4d1ad8

  • Size

    158KB

  • Sample

    210627-z9h6rcevva

  • MD5

    4eb67761a30e4ad589c10172ff1d867e

  • SHA1

    98346bd760b4aaf3d63d1d90da127c339d5696b1

  • SHA256

    8bd42cbe70b71fd44ccf18d6879d827fd215521463aef739b8dd01b48f4d1ad8

  • SHA512

    054a0ea72142dd3885bf2f2d96bb781c16189d91b74746864904f27e64c72e428edba1f69061880ad8f122e951c124071419f92b38a75c8b456608591869c656

Score
10/10
dridex40111botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

40111

C2

8.210.53.215:443

72.249.22.245:2303

188.40.137.206:8172
rc4.plain
rc4.plain

Targets

    • Target

      8bd42cbe70b71fd44ccf18d6879d827fd215521463aef739b8dd01b48f4d1ad8

    • Size

      158KB

    • MD5

      4eb67761a30e4ad589c10172ff1d867e

    • SHA1

      98346bd760b4aaf3d63d1d90da127c339d5696b1

    • SHA256

      8bd42cbe70b71fd44ccf18d6879d827fd215521463aef739b8dd01b48f4d1ad8

    • SHA512

      054a0ea72142dd3885bf2f2d96bb781c16189d91b74746864904f27e64c72e428edba1f69061880ad8f122e951c124071419f92b38a75c8b456608591869c656

    Score
    10/10
    dridex40111botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks