Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d619209dc6f4b31d57955d2b06f6b0f2b1f629e5d922d28274abf7bb0a157a9

  • Size

    184KB

  • Sample

    210810-a87sqh8a26

  • MD5

    c267d81060793bd960749cfcbf37f4c0

  • SHA1

    9c5bc4cf796bfd813e11d431096855b764643316

  • SHA256

    4d619209dc6f4b31d57955d2b06f6b0f2b1f629e5d922d28274abf7bb0a157a9

  • SHA512

    b31c067cda0c9c9a3adb5f027ef67fcf69f1836a2721b6627d0a9133bd3d046ad4b23cf239c6afbd21c5b6eb34ad475bdf3b43d4d0001e150b4f34efac6489eb

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      4d619209dc6f4b31d57955d2b06f6b0f2b1f629e5d922d28274abf7bb0a157a9

    • Size

      184KB

    • MD5

      c267d81060793bd960749cfcbf37f4c0

    • SHA1

      9c5bc4cf796bfd813e11d431096855b764643316

    • SHA256

      4d619209dc6f4b31d57955d2b06f6b0f2b1f629e5d922d28274abf7bb0a157a9

    • SHA512

      b31c067cda0c9c9a3adb5f027ef67fcf69f1836a2721b6627d0a9133bd3d046ad4b23cf239c6afbd21c5b6eb34ad475bdf3b43d4d0001e150b4f34efac6489eb

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks