Overview

overview

10

Static

static

dridex

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37d5a2ce90d770ee967a2d7a658d3fc93f3716bdfc5e8fafb7966f416cc7e96a

  • Size

    184KB

  • Sample

    210810-x72tvjkwf6

  • MD5

    d374267af35fec812bd6335ead255b92

  • SHA1

    99e98812e76703791cd04a364278937dbef211fb

  • SHA256

    37d5a2ce90d770ee967a2d7a658d3fc93f3716bdfc5e8fafb7966f416cc7e96a

  • SHA512

    0db9f3ec58922d5a99b773fb4a36aead1928eef9be8928cf52a541fc4c47b889665334f5eb02d54ae01917d7af226625f06d0184b072475f5f8e8c839a6e5f12

Score
10/10
dridex22201botnetloader

Malware Config

Extracted

Family

dridex

Botnet

22201

C2

103.75.201.2:443

158.223.1.108:6225

165.22.28.242:4664
rc4.plain
rc4.plain

Targets

    • Target

      37d5a2ce90d770ee967a2d7a658d3fc93f3716bdfc5e8fafb7966f416cc7e96a

    • Size

      184KB

    • MD5

      d374267af35fec812bd6335ead255b92

    • SHA1

      99e98812e76703791cd04a364278937dbef211fb

    • SHA256

      37d5a2ce90d770ee967a2d7a658d3fc93f3716bdfc5e8fafb7966f416cc7e96a

    • SHA512

      0db9f3ec58922d5a99b773fb4a36aead1928eef9be8928cf52a541fc4c47b889665334f5eb02d54ae01917d7af226625f06d0184b072475f5f8e8c839a6e5f12

    Score
    10/10
    dridex22201botnetloader

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

      botnetdridex

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

      botnetloader
    behavioral1

MITRE ATT&CK Matrix

Tasks