Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5165687bd340d9d059c6571d35e242f9833518420289904e9a85f06ba1e6e7f

  • Size

    184KB

  • Sample

    210810-4hrtqa6ab6

  • MD5

    8855a1c80cf7c0f12e0a9e18e8af86d9

  • SHA1

    66f2a30248288262ed7a9cbc511c460d982a6b86

  • SHA256

    b5165687bd340d9d059c6571d35e242f9833518420289904e9a85f06ba1e6e7f

  • SHA512

    2b5ed0a0d2fcb1729f3efbec23d5d05557979fae64987f7d2119da126eccf86568d8587bf1a161c37a4a85fc035e62328c7f977484d807140f7a8263f244efee

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      b5165687bd340d9d059c6571d35e242f9833518420289904e9a85f06ba1e6e7f

    • Size

      184KB

    • MD5

      8855a1c80cf7c0f12e0a9e18e8af86d9

    • SHA1

      66f2a30248288262ed7a9cbc511c460d982a6b86

    • SHA256

      b5165687bd340d9d059c6571d35e242f9833518420289904e9a85f06ba1e6e7f

    • SHA512

      2b5ed0a0d2fcb1729f3efbec23d5d05557979fae64987f7d2119da126eccf86568d8587bf1a161c37a4a85fc035e62328c7f977484d807140f7a8263f244efee

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks