Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64f0271ec0e01237becac706f848e82b0397b5f0eaed00fa6047487e77c3fc79

  • Size

    184KB

  • Sample

    210810-13enqwey6a

  • MD5

    3db31c19dd677606e0e6518cfc6668ea

  • SHA1

    d3d2eaa6b076d387584ed095c2c8ad9600ad2cb8

  • SHA256

    64f0271ec0e01237becac706f848e82b0397b5f0eaed00fa6047487e77c3fc79

  • SHA512

    5e72c310cbaea2d91dc7427527cf22c855511b41bcea4e9074e46cd51f28ef799fdb1214def63cba0d2523ce4aae85d94106e2149ece0b29354350d3996dfcba

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      64f0271ec0e01237becac706f848e82b0397b5f0eaed00fa6047487e77c3fc79

    • Size

      184KB

    • MD5

      3db31c19dd677606e0e6518cfc6668ea

    • SHA1

      d3d2eaa6b076d387584ed095c2c8ad9600ad2cb8

    • SHA256

      64f0271ec0e01237becac706f848e82b0397b5f0eaed00fa6047487e77c3fc79

    • SHA512

      5e72c310cbaea2d91dc7427527cf22c855511b41bcea4e9074e46cd51f28ef799fdb1214def63cba0d2523ce4aae85d94106e2149ece0b29354350d3996dfcba

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks