Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df94ebbbe997cff4e1c9510842a46c086b491fb58943f7d87fb527c1161d6b99

  • Size

    184KB

  • Sample

    210810-4n1yvghp2e

  • MD5

    0e87b70c8f903681923c054a98faaac3

  • SHA1

    90d8c4878c6c1a484a245ac56f2d7b8e259822f0

  • SHA256

    df94ebbbe997cff4e1c9510842a46c086b491fb58943f7d87fb527c1161d6b99

  • SHA512

    da8f165fbf469973ed0488072f95af10c41ba0c82fb99db4e29b48d3bff1b3a652ba019ed6d5f7810bb39e1834adf05cf5ddc26968ba877904038b6d73175b30

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      df94ebbbe997cff4e1c9510842a46c086b491fb58943f7d87fb527c1161d6b99

    • Size

      184KB

    • MD5

      0e87b70c8f903681923c054a98faaac3

    • SHA1

      90d8c4878c6c1a484a245ac56f2d7b8e259822f0

    • SHA256

      df94ebbbe997cff4e1c9510842a46c086b491fb58943f7d87fb527c1161d6b99

    • SHA512

      da8f165fbf469973ed0488072f95af10c41ba0c82fb99db4e29b48d3bff1b3a652ba019ed6d5f7810bb39e1834adf05cf5ddc26968ba877904038b6d73175b30

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks