Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    542999df8b5657e94464ed81bbb842482934108683e836895e10572377aca1a0

  • Size

    184KB

  • Sample

    210810-3pxp993xgj

  • MD5

    bac5330175d64245c311d40a1c03a170

  • SHA1

    759991b780dd825e9bc99e0861b35f9d90afdb7e

  • SHA256

    542999df8b5657e94464ed81bbb842482934108683e836895e10572377aca1a0

  • SHA512

    6c22acb20873c38e110efb63d6a03f532fae095c69d666d759f3cd932963064a7b155699205c0fc8c95718913d7b8845bf7a5290671ca396cfd3a0e3edb99730

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      542999df8b5657e94464ed81bbb842482934108683e836895e10572377aca1a0

    • Size

      184KB

    • MD5

      bac5330175d64245c311d40a1c03a170

    • SHA1

      759991b780dd825e9bc99e0861b35f9d90afdb7e

    • SHA256

      542999df8b5657e94464ed81bbb842482934108683e836895e10572377aca1a0

    • SHA512

      6c22acb20873c38e110efb63d6a03f532fae095c69d666d759f3cd932963064a7b155699205c0fc8c95718913d7b8845bf7a5290671ca396cfd3a0e3edb99730

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks