Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    836ed4033704fd41d5a5a2a092780a7e9f015793ad20c1416a49651434ffde1e

  • Size

    184KB

  • Sample

    210810-npx57shkye

  • MD5

    9db2f04f871eb3e4e046b1038030164e

  • SHA1

    0cbed9998907911e8349c8cb6c1a35c61b81d28b

  • SHA256

    836ed4033704fd41d5a5a2a092780a7e9f015793ad20c1416a49651434ffde1e

  • SHA512

    c4de0bda95a3d195f81f6df2fffc77ae63861b5c4516ff20cb98317c071d7b9a63d69780d6259c00ee07a1b22c57945457d3f7327a5b9e1cd5025f1bb300fd77

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      836ed4033704fd41d5a5a2a092780a7e9f015793ad20c1416a49651434ffde1e

    • Size

      184KB

    • MD5

      9db2f04f871eb3e4e046b1038030164e

    • SHA1

      0cbed9998907911e8349c8cb6c1a35c61b81d28b

    • SHA256

      836ed4033704fd41d5a5a2a092780a7e9f015793ad20c1416a49651434ffde1e

    • SHA512

      c4de0bda95a3d195f81f6df2fffc77ae63861b5c4516ff20cb98317c071d7b9a63d69780d6259c00ee07a1b22c57945457d3f7327a5b9e1cd5025f1bb300fd77

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks