Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae167e7f01f62282746416df6b0de90d96ad5431cfd625b869a1067958721957

  • Size

    184KB

  • Sample

    210810-c4l8x2h3z2

  • MD5

    0db4ee9be79824274d08cc5b49b34e26

  • SHA1

    0d3cc69e5186fe651703486f118b771430155fa9

  • SHA256

    ae167e7f01f62282746416df6b0de90d96ad5431cfd625b869a1067958721957

  • SHA512

    fae0d6d8c6fdb27ea1115464e226f079af63eaee5e048a4f72e117538c5ec68cc1c47ce6b875322463b525d969bf60dae5329ddf22dd72e3095264a7987d9afc

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      ae167e7f01f62282746416df6b0de90d96ad5431cfd625b869a1067958721957

    • Size

      184KB

    • MD5

      0db4ee9be79824274d08cc5b49b34e26

    • SHA1

      0d3cc69e5186fe651703486f118b771430155fa9

    • SHA256

      ae167e7f01f62282746416df6b0de90d96ad5431cfd625b869a1067958721957

    • SHA512

      fae0d6d8c6fdb27ea1115464e226f079af63eaee5e048a4f72e117538c5ec68cc1c47ce6b875322463b525d969bf60dae5329ddf22dd72e3095264a7987d9afc

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks