Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a32018355ae3d1203ace6ea5fcffa3c31b12e7ae48c601789c76ecc871f6fca8

  • Size

    184KB

  • Sample

    210810-a5cxwvekqn

  • MD5

    a286f61d3b92ed15db1807f42d4c6818

  • SHA1

    ea0f979083d705e98e888e222fbe0ecccf0e7efd

  • SHA256

    a32018355ae3d1203ace6ea5fcffa3c31b12e7ae48c601789c76ecc871f6fca8

  • SHA512

    136edc5debb07fac696af59fbb54adfc45e5e169bb2b244cc8d025b619ea352ab2ca37cc14c5b5b568051ad1dc8dd913128cd7370613615cd50e50b602382884

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      a32018355ae3d1203ace6ea5fcffa3c31b12e7ae48c601789c76ecc871f6fca8

    • Size

      184KB

    • MD5

      a286f61d3b92ed15db1807f42d4c6818

    • SHA1

      ea0f979083d705e98e888e222fbe0ecccf0e7efd

    • SHA256

      a32018355ae3d1203ace6ea5fcffa3c31b12e7ae48c601789c76ecc871f6fca8

    • SHA512

      136edc5debb07fac696af59fbb54adfc45e5e169bb2b244cc8d025b619ea352ab2ca37cc14c5b5b568051ad1dc8dd913128cd7370613615cd50e50b602382884

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks