Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccde7438b5015713fef79809dd2fa46a1cd2ee5f81f53b322f3ec716dc6e4e38

  • Size

    175KB

  • Sample

    210727-bm9czh94cx

  • MD5

    0c0c38134875c72afde26826cd71d3c4

  • SHA1

    f72965ef856be9cc8f3264cfd818d223f66f3f2c

  • SHA256

    ccde7438b5015713fef79809dd2fa46a1cd2ee5f81f53b322f3ec716dc6e4e38

  • SHA512

    b7ee826072fa457b2644938f8f863cdb77ef92ba9f7ef91bccedec9f839ecc9e34724531add9b83628209cc76c0c65a03950fb179ec8b523fd561ea0115a1df7

Score
10/10
dridex22201botnetevasionloadertrojan

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

45.79.33.48:443

139.162.202.74:5007

68.183.216.174:7443
rc4.plain
rc4.plain

Targets

    • Target

      ccde7438b5015713fef79809dd2fa46a1cd2ee5f81f53b322f3ec716dc6e4e38

    • Size

      175KB

    • MD5

      0c0c38134875c72afde26826cd71d3c4

    • SHA1

      f72965ef856be9cc8f3264cfd818d223f66f3f2c

    • SHA256

      ccde7438b5015713fef79809dd2fa46a1cd2ee5f81f53b322f3ec716dc6e4e38

    • SHA512

      b7ee826072fa457b2644938f8f863cdb77ef92ba9f7ef91bccedec9f839ecc9e34724531add9b83628209cc76c0c65a03950fb179ec8b523fd561ea0115a1df7

    Score
    10/10
    dridex22201botnetevasionloadertrojan

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks