Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2df6874bffab3c5caab612da8ed14bd33878b60efc3a292de0f86707115f4c1

  • Size

    184KB

  • Sample

    210810-e9kn5xzyrx

  • MD5

    339c6c644b0e21f342499a1bcea09ae8

  • SHA1

    58a9d8600cbe15d65093ef82e2e26eb73ba5c87c

  • SHA256

    f2df6874bffab3c5caab612da8ed14bd33878b60efc3a292de0f86707115f4c1

  • SHA512

    85422c3fecbb6cc30ea5fa6ff4f6d94f94b0bd56ae09d448822d79511a8dbff43f5069380ee7d446b0d15b05644e974b3a617577e9f8331d6d20502d1fab974a

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      f2df6874bffab3c5caab612da8ed14bd33878b60efc3a292de0f86707115f4c1

    • Size

      184KB

    • MD5

      339c6c644b0e21f342499a1bcea09ae8

    • SHA1

      58a9d8600cbe15d65093ef82e2e26eb73ba5c87c

    • SHA256

      f2df6874bffab3c5caab612da8ed14bd33878b60efc3a292de0f86707115f4c1

    • SHA512

      85422c3fecbb6cc30ea5fa6ff4f6d94f94b0bd56ae09d448822d79511a8dbff43f5069380ee7d446b0d15b05644e974b3a617577e9f8331d6d20502d1fab974a

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks