Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5472915c37688d279e7a08257278c7069eb8d91e083eb1184592faef5f77097d

  • Size

    184KB

  • Sample

    210810-b8l6pn8nvx

  • MD5

    6c0a00fc18b8c553ef2c42ff9bc8832f

  • SHA1

    65ee8fdffe2b7f1ed4420654bfc3cfe8af1bdb81

  • SHA256

    5472915c37688d279e7a08257278c7069eb8d91e083eb1184592faef5f77097d

  • SHA512

    a1b2812953e7f854629191477e68d78394064bff9d71f62444e9c9cb631d6f18ff44e50d64e769c313c7771a8612bf2f9f41be2278c85ebdcc737aa8aef4f80e

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      5472915c37688d279e7a08257278c7069eb8d91e083eb1184592faef5f77097d

    • Size

      184KB

    • MD5

      6c0a00fc18b8c553ef2c42ff9bc8832f

    • SHA1

      65ee8fdffe2b7f1ed4420654bfc3cfe8af1bdb81

    • SHA256

      5472915c37688d279e7a08257278c7069eb8d91e083eb1184592faef5f77097d

    • SHA512

      a1b2812953e7f854629191477e68d78394064bff9d71f62444e9c9cb631d6f18ff44e50d64e769c313c7771a8612bf2f9f41be2278c85ebdcc737aa8aef4f80e

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks