Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5a0dc2079fe4a8c2b0e2660a16b30b22e89f236479a3d9dfc9811dc4ee4c17b

  • Size

    184KB

  • Sample

    210810-ngb8x62scx

  • MD5

    b4aa4f677d2460d47efe5fe45d6542b5

  • SHA1

    2cfe90a7c410565526ef3c9a6f59f9e76f36828c

  • SHA256

    b5a0dc2079fe4a8c2b0e2660a16b30b22e89f236479a3d9dfc9811dc4ee4c17b

  • SHA512

    16b022413e6e78f0e86ea1814d7bcbee3a72ecc76fe3bd803946ab36fb67e3e0d1bbe9b081893fcdc32e28b797a93a1b81c0add24995819ec1926cbd4880d9f2

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      b5a0dc2079fe4a8c2b0e2660a16b30b22e89f236479a3d9dfc9811dc4ee4c17b

    • Size

      184KB

    • MD5

      b4aa4f677d2460d47efe5fe45d6542b5

    • SHA1

      2cfe90a7c410565526ef3c9a6f59f9e76f36828c

    • SHA256

      b5a0dc2079fe4a8c2b0e2660a16b30b22e89f236479a3d9dfc9811dc4ee4c17b

    • SHA512

      16b022413e6e78f0e86ea1814d7bcbee3a72ecc76fe3bd803946ab36fb67e3e0d1bbe9b081893fcdc32e28b797a93a1b81c0add24995819ec1926cbd4880d9f2

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks